Lucene search

[email protected]CVE-2023-1288

HistoryMar 09, 2023 - 5:15 p.m.

CVE-2023-1288

2023-03-0917:15:10

CWE-611

[email protected]

web.nvd.nist.gov

cve-2023-1288

xml external entity injection

xxe

enovia live collaboration v6r2013xe

security vulnerability

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%

JSON

An XML External Entity injection (XXE) vulnerability in ENOVIA Live Collaboration V6R2013xE allows an attacker to read local files on the server.

Affected configurations

NVD

Node

3dsenovia_live_collaborationRangev6r2013xe–v6r2013xe_fp.cfa.2240

CPENameOperatorVersion
3ds:enovia_live_collaboration3ds enovia live collaborationltv6r2013xe_fp.cfa.2240

CPE	Name	Operator	Version
3ds:enovia_live_collaboration	3ds enovia live collaboration	lt	v6r2013xe_fp.cfa.2240

CNA Affected

[
  {
    "vendor": "Dassault Systèmes",
    "product": "ENOVIA Live Collaboration",
    "versions": [
      {
        "status": "affected",
        "version": "V6R2013xE Golden",
        "lessThanOrEqual": "V6R2013xE FP.CFA.2228",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.3ds.com/vulnerability/advisories

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%

JSON

Related for CVE-2023-1288

prion1 cvelist1 nvd1