CVE-2018-10613

2018-05-3100:00:00

CWE-611

icscert

www.cve.org

7.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.4%

JSON

Multiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the host Windows platform in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior.

CNA Affected

[
  {
    "product": "MDS PulseNET and MDS PulseNET Enterprise",
    "vendor": "GE",
    "versions": [
      {
        "status": "affected",
        "version": "Version 3.2.1 and prior"
      }
    ]
  }
]