Cross-site scripting Vulnerability in Teamcenter Active Workspace

An attacker could inject malicious script into Teamcenter Active Workspace to steal user session data or credentials from engineering workstations. This could compromise access to product lifecycle management systems that control design documentation and manufacturing data.

Engineering teams and manufacturing organizations using Teamcenter Active Workspace for product lifecycle management, design collaboration, and manufacturing data control. Particularly relevant for discrete manufacturing, automotive, and heavy equipment companies where product data security is critical.

An attacker crafts a malicious URL or embeds JavaScript in a Teamcenter Active Workspace page. When an engineer clicks the link or views the page, the script executes in their browser with their session privileges, allowing credential theft or session hijacking.