CVE-2013-1140

2013-03-0611:00:00

cisco

www.cve.org

cisco mars

xml parser

remote attackers

arbitrary files

entity declaration

xxe issue

bug id cscue55093

AI Score

6.8

Confidence

Low

EPSS

0.003

Percentile

66.1%

JSON

The XML parser in Cisco Security Monitoring, Analysis, and Response System (MARS) allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCue55093.

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1140