VulnerabilitiesSiemens patches Teamcenter login flaw that could hijack engineer sessions
A reflected cross-site scripting bug in the /auth/ endpoint lets a crafted link run attacker code inside a logged-in user's browser. Siemens has shipped fixes across four release trains.