Lucene search

MicrofocusCVELIST:CVE-2018-12471

HistoryOct 04, 2018 - 2:00 p.m.

CVE-2018-12471 External Entity processing in the RegistrationSharing module

2018-10-0414:00:00

CWE-611

microfocus

www.cve.org

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

AI Score

8.8

Confidence

High

EPSS

0.002

Percentile

62.2%

JSON

A External Entity Reference (‘XXE’) vulnerability in SUSE Linux SMT allows remote attackers to read data from the server or cause DoS by referencing blocking elements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.

CNA Affected

[
  {
    "product": "SMT",
    "vendor": "SUSE Linux",
    "versions": [
      {
        "lessThan": "3.0.37",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

bugzilla.suse.com/show_bug.cgi?id=1103809

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

AI Score

8.8

Confidence

High

EPSS

0.002

Percentile

62.2%

JSON

Related for CVELIST:CVE-2018-12471