CVE-2015-2346

2015-05-1815:00:00

mitre

www.cve.org

6.3 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.5%

JSON

XML external entity (XXE) vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022 allows remote authenticated users to read arbitrary files via the req parameter.

References

packetstormsecurity.com/files/131459/Huawei-SEQ-Analyst-XXE-Injection.html

seclists.org/fulldisclosure/2015/Apr/42