Lucene search

K
cve[email protected]CVE-2015-4538
HistorySep 04, 2015 - 1:59 a.m.

CVE-2015-4538

2015-09-0401:59:00
NVD-CWE-Other
web.nvd.nist.gov
17
emc atmos
xml parser
cve-2015-4538
xxe
nvd
security
remote authentication

7.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:C/I:N/A:P

0.003 Low

EPSS

Percentile

70.8%

The XML parser in EMC Atmos before 2.2.3.426 and 2.3.x before 2.3.1.0 allows remote authenticated users to read arbitrary files or cause a denial of service (CPU and memory consumption) via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

7.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:C/I:N/A:P

0.003 Low

EPSS

Percentile

70.8%

Related for CVE-2015-4538