CVE-2017-8056

🗓️ 22 Apr 2017 22:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 50 Views🌐 WEB

WatchGuard Fireware v11.12.1 and earlier mishandles requests referring to an XML External Entity (XXE), causing a cras

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2017-8056	30 Mar 202521:01	–	circl
CNVD	WatchGuard Fireware Denial of Service Vulnerability	24 Apr 201700:00	–	cnvd
Cvelist	CVE-2017-8056	22 Apr 201722:00	–	cvelist
NVD	CVE-2017-8056	22 Apr 201722:59	–	nvd
OSV	CVE-2017-8056	22 Apr 201722:59	–	osv
Packet Storm	Watchguard Firebox / XTM XML-RPC Empty Member Denial Of Service	19 Sep 201700:00	–	packetstorm
Prion	Xxe	22 Apr 201722:59	–	prion
RedhatCVE	CVE-2017-8056	22 May 202510:40	–	redhatcve

NVD

Node

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/142177/watchguardfbxtm-xxeinject.txt
watchguardsupport	www.watchguardsupport.force.com/publicKB
sidertia	www.sidertia.com/Home/Community/Blog/2017/04/17/Fixed-the-Fireware-Vulnerabilities-discovered-by-Sidertia
watchguard	www.watchguard.com/support/release-notes/fireware/11/en-US/EN_ReleaseNotes_Fireware_11_12_2/index.html

Parameter	Position	Path	Description	CWE
user	request body	agent/login	XML-RPC login endpoint vulnerable to XML External Entity DoS via crafted XML in login request.	CWE-611
user	request body	agent/login	XML-RPC login endpoint vulnerable to stored XSS via crafted XML containing malicious user value.	CWE-79

17 Jun 2026 01:25Current

5.2Medium risk

Vulners AI Score5.2

CVSS 25

CVSS 35.3

EPSS0.05076