Lucene search
HistorySep 16, 2015 - 6:59 p.m.
CVE-2015-3623
cve-2015-3623
xxe vulnerability
qliktech qlikview
ssrf attacks
accesspoint.aspx
nvd
6.4 Medium
AI Score
Confidence
High
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.044 Low
EPSS
Percentile
92.4%
XML external entity (XXE) vulnerability in QlikTech Qlikview before 11.20 SR12 allows remote attackers to conduct server-side request forgery (SSRF) attacks and read arbitrary files via crafted XML data in a request to AccessPoint.aspx.
| CPE | Name | Operator | Version |
|---|---|---|---|
| qlik:qlikview | qlik qlikview | le | 11.20 |
Related
nessus
nessus
QlikView Server AccessPoint XML External Entity Injection
2016-06-23 00:00:00
kaspersky
kaspersky
KLA10668 File access vulnerability in QlikTech QlikView
2015-09-16 00:00:00
zdt
zdt
Qlikview 11.20 SR11 - Blind XXE Injection Vulnerability
2015-09-09 00:00:00
prion
prion
Server side request forgery (ssrf)
2015-09-16 18:59:00
packetstorm
packetstorm
Qlikview 11.20 SR4 Blind XXE Injection
2015-09-09 00:00:00
securityvulns
securityvulns
[CVE-2015-3623] Qlikview blind XXE Security Vulnerability
2015-10-26 00:00:00
exploitpack
exploitpack
Qlikview 11.20 SR11 - Blind XML External Entity Injection
2015-09-09 00:00:00
exploitdb
exploitdb
Qlikview 11.20 SR11 - Blind XML External Entity Injection
2015-09-09 00:00:00
6.4 Medium
AI Score
Confidence
High
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.044 Low
EPSS
Percentile
92.4%
Related for CVE-2015-3623