CVE-2018-11640

2018-07-0317:00:00

mitre

www.cve.org

AI Score

9.1

Confidence

High

EPSS

0.007

Percentile

79.7%

JSON

XML External Entity (XXE) vulnerability in the web service in Dialogic PowerMedia XMS before 3.5 SU2 allows remote attackers to read arbitrary files or cause a denial of service (resource consumption).

References

d3adend.org/blog/?p=1398