Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w8jj-j97r-vm8v

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.4

Описание

Cisco Prime Infrastructure 2.2, 3.0, and 3.1(0.0) allows remote authenticated users to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCuw81497.

Cisco Prime Infrastructure 2.2, 3.0, and 3.1(0.0) allows remote authenticated users to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCuw81497.

EPSS

Процентиль: 65%
0.00486
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 6.4
nvd
почти 10 лет назад

Cisco Prime Infrastructure 2.2, 3.0, and 3.1(0.0) allows remote authenticated users to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCuw81497.

EPSS

Процентиль: 65%
0.00486
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-119