Lucene search
MitreCVE-2023-26263HistoryApr 13, 2023 - 7:15 p.m.
CVE-2023-26263
2023-04-1319:15:08
CWE-611
mitre
web.nvd.nist.gov
16
talend
data catalog
vulnerability
xml external entity
xxe
cve-2023-26263
nvd
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
AI Score
5.5
Confidence
High
EPSS
0.001
Percentile
23.6%
All versions of Talend Data Catalog before 8.0-20230110 are potentially vulnerable to XML External Entity (XXE) attacks in the /MIMBWebServices/license endpoint of the remote harvesting server.
Affected configurations
Node
talenddata_catalogRange<8.0-20230110
| Vendor | Product | Version | CPE |
|---|---|---|---|
| talend | data_catalog | * | cpe:2.3:a:talend:data_catalog:*:*:*:*:*:*:*:* |
Related
prion
prion
Xxe
2023-04-13 19:15:00
nvd
nvd
CVE-2023-26263
2023-04-13 19:15:08
cvelist
cvelist
CVE-2023-26263
2023-04-13 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
AI Score
5.5
Confidence
High
EPSS
0.001
Percentile
23.6%
Related for CVE-2023-26263