Lucene search

K
cvelistMitreCVELIST:CVE-2018-1000651
HistoryAug 20, 2018 - 7:00 p.m.

CVE-2018-1000651

2018-08-2019:00:00
mitre
www.cve.org
4
cve-2018-1000651
xml parser
xxe vulnerability
disclosure of confidential data
denial of service
server side request forgery
port scanning
specially crafted xml file

AI Score

9.2

Confidence

High

EPSS

0.002

Percentile

61.3%

Stroom version <5.4.5 contains a XML External Entity (XXE) vulnerability in XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted XML file.

AI Score

9.2

Confidence

High

EPSS

0.002

Percentile

61.3%

Related for CVELIST:CVE-2018-1000651