Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:tia_project-server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductTia Project Server (ce963e6b-4d71-56ee-b006-64a6fb470190)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-30033 vulnerable 2026-06-08 07:16:58.997952 Details available
HIGH (7.8)
The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.
Published: 2025-08-12T11:16:56.565Z
Updated: 2026-11-10T11:30:27.866Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27127 vulnerable 2026-06-08 07:14:54.171780 Details available
MEDIUM (4.3)
A vulnerability has been identified in TIA Project-Server (All versions < V2.1.1), TIA Project-Server V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions < V19 Update 4), Totally Integrated Automation Portal (TIA Portal) V20 (All versions < V20 Update 3). The affected application improperly handles uploaded projects in the document root. This could allow an attacker with contributor privileges to cause denial of service by uploading a malicious project.
Published: 2025-07-08T10:34:31.542Z
Updated: 2025-08-12T11:16:54.752Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35868 vulnerable 2026-06-08 05:46:05.892757 Details available
MEDIUM (6.7)
A vulnerability has been identified in TIA Multiuser Server V14 (All versions), TIA Multiuser Server V15 (All versions < V15.1 Update 8), TIA Project-Server (All versions < V1.1), TIA Project-Server V16 (All versions), TIA Project-Server V17 (All versions < V17 Update 6). Affected applications contain an untrusted search path vulnerability that could allow an attacker to escalate privileges, when tricking a legitimate user to start the service from an attacker controlled path.
Published: 2023-02-14T10:36:08.964Z
Updated: 2024-08-13T07:50:22.699Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.