Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistMitreCVELIST:CVE-2019-11216
HistoryDec 04, 2019 - 7:31 p.m.

CVE-2019-11216

2019-12-0419:31:55
mitre
www.cve.org
1

0.01 Low

EPSS

Percentile

84.1%

JSON

BMC Smart Reporting 7.3 20180418 allows authenticated XXE within the import functionality. One can import a malicious XML file and perform XXE attacks to download local files from the server, or do DoS attacks with XML expansion attacks. XXE with direct response and XXE OOB are allowed.

Related

packetstorm 1
prion 1
symantec 1
nvd 1
cve 1
packetstorm
packetstorm
BMC Smart Reporting 7.3 20180418 XML Injection
2019-12-04 00:00:00
prion
prion
Design/Logic Flaw
2019-12-04 20:15:00
symantec
symantec
BMC Remedy Smart Reporting CVE-2019-11216 XML External Entity Injection Vulnerability
2019-12-02 00:00:00
nvd
nvd
CVE-2019-11216
2019-12-04 20:15:12
cve
cve
CVE-2019-11216
2019-12-04 20:15:12

0.01 Low

EPSS

Percentile

84.1%

JSON
Related for CVELIST:CVE-2019-11216
packetstorm1prion1symantec1nvd1cve1