CVE-2016-8348 in SiteScan Web Version

सारांश

द्वारा MITRE

An XML External Entity (XXE) issue was discovered in Emerson Liebert SiteScan Web Version 6.5, and prior. An attacker may enter malicious input to Liebert SiteScan through a weakly configured XML parser causing the application to execute arbitrary code or disclose file contents from a server or connected network.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• आरक्षित करना: 28/09/2016
• प्रकटीकरण: 13/02/2017
• संयम: स्वीकृत
• प्रविष्टि: VDB-96863
• CPE: तैयार
• CWE: CWE-611 (पुष्टि की गई)
• CVSS: 9.8 (NVD)
• EPSS: 0.03521
• KEV: नहीं
• गतिविधियाँ: बहुत कम

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-8348
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-8348
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-8348/