Skip to content
Noroxi

PTC records

36 published records for vendor ptc.

Researcher profile

Entered KEV
1 · 2.8%
Weaponized
1 · 2.8%
Pre-auth RCE
8
With a fix record
0%
Median publish → KEV
8 days

Records by year

  1. 18
  2. 21
  3. 22
  4. 23
  5. 24
  6. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

36 records
  • CVE-2026-12569
    81Now

    Remote Code Execution (RCE) vulnerability in Windchill PDMlink

    CriticalCVSS 9.3KEVWeaponizedEPSS 46%

    ptc · flexplmJun 17, 2026

  • CVE-2023-0755
    43Plan

    The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remote

    CriticalCVSS 9.8No exploitEPSS 12%

    ge · digital industrial gateway serverFeb 23, 2023

  • CVE-2020-27265
    42Plan

    KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All ver

    CriticalCVSS 9.8No exploitEPSS 10%

    ge · industrial gateway serverJan 13, 2021

  • CVE-2022-25247
    40Plan

    PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function

    CriticalCVSS 9.8No exploitEPSS 4%

    ptc · axeda agentMar 16, 2022

  • CVE-2022-2825
    40Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0.

    CriticalCVSS 9.8No exploitEPSS 3%

    ge · industrial gateway serverMar 29, 2023

  • CVE-2023-0754
    40Plan

    The affected products are vulnerable to an integer overflow or wraparound, which could  allow an attacker to crash the server and remotely

    CriticalCVSS 9.8No exploitEPSS 3%

    ge · digital industrial gateway serverFeb 23, 2023

  • CVE-2022-25251
    40Plan

    PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function

    CriticalCVSS 9.8No exploitEPSS 2%

    ptc · axeda agentMar 16, 2022

  • CVE-2023-27881
    39Monitor

    PTC Vuforia Studio Unrestricted Upload of File with Dangerous Type

    CriticalCVSS 9.9No exploitEPSS 1%

    ptc · vuforia studioJun 7, 2023

  • CVE-2020-27263
    37Monitor

    KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All ver

    CriticalCVSS 9.1No exploitEPSS 5%

    ge · industrial gateway serverJan 13, 2021

  • CVE-2020-27267
    37Monitor

    KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-Aggregator (all vers

    CriticalCVSS 9.1No exploitEPSS 5%

    ge · industrial gateway serverJan 13, 2021

  • CVE-2022-2848
    37Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0.

    CriticalCVSS 9.1No exploitEPSS 3%

    ge · industrial gateway serverMar 29, 2023

  • CVE-2022-25246
    36Monitor

    PTC Axeda agent and Axeda Desktop Server Use of Hard-Coded Credentials

    HighCVSS 8.8No exploitEPSS 2%

    ptc · axeda agentMar 16, 2022

  • CVE-2023-5908
    36Monitor

    Heap Based Buffer Overflow in PTC KEPServerEx

    CriticalCVSS 9.1No exploitEPSS 1%

    ge · industrial gateway serverNov 30, 2023

  • CVE-2023-29152
    32Monitor

    PTC Vuforia Studio Improper Authorization

    HighCVSS 8.1No exploitEPSS 0%

    ptc · vuforia studioJun 7, 2023

  • CVE-2023-31200
    32Monitor

    PTC Vuforia Studio Cross-Site Request Forgery

    HighCVSS 8.0No exploitEPSS 0%

    ptc · vuforia studioJun 7, 2023

  • CVE-2015-2061
    31Monitor

    Heap-based buffer overflow in the browser plugin for PTC Creo View allows remote attackers to execute arbitrary code via vectors involving s

    HighCVSS 7.5No exploitEPSS 4%

    ptc · creo viewMar 9, 2015

  • CVE-2022-25249
    31Monitor

    PTC Axeda agent and Axeda Desktop Server Path Traversal

    HighCVSS 7.5No exploitEPSS 2%

    ptc · axeda agentMar 16, 2022

  • CVE-2018-20092
    31Monitor

    PTC ThingWorx Platform through 8.3.0 is vulnerable to a directory traversal attack on ZIP files via a POST request.

    HighCVSS 7.5No exploitEPSS 2%

    ptc · thingworx platformDec 17, 2018

  • CVE-2023-29445
    31Monitor

    Uncontrolled Search Path Element in PTC's Kepware KEPServerEX

    HighCVSS 7.8No exploitEPSS 0%

    ptc · kepware kepserverexJan 10, 2024

  • CVE-2022-25250
    30Monitor

    PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function

    HighCVSS 7.5No exploitEPSS 2%

    ptc · axeda agentMar 16, 2022

  • CVE-2022-25252
    30Monitor

    PTC Axeda agent and Axeda Desktop Server Improper Check or Handling Of Exceptional Conditions

    HighCVSS 7.5No exploitEPSS 2%

    ptc · axeda agentMar 16, 2022

  • CVE-2018-17217
    30Monitor

    An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2.

    HighCVSS 7.5No exploitEPSS 1%

    ptc · thingworx platformSep 30, 2018

  • CVE-2023-29168
    30Monitor

    PTC Vuforia Studio Insufficiently Protected Credentials

    HighCVSS 7.5No exploitEPSS 0%

    ptc · vuforia studioJun 7, 2023

  • CVE-2023-5909
    30Monitor

    Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx

    HighCVSS 7.5No exploitEPSS 0%

    ge · industrial gateway serverNov 30, 2023

  • CVE-2023-29444
    29Monitor

    Uncontrolled Search Path Element in PTC's Kepware KEPServerEX

    HighCVSS 7.3No exploitEPSS 0%

    ptc · kepware kepserverexJan 10, 2024