Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2018-10613
HistoryJun 04, 2018 - 2:29 p.m.

CVE-2018-10613

2018-06-0414:29:00
CWE-611
[email protected]
web.nvd.nist.gov
1

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.4%

JSON

Multiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the host Windows platform in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior.

Affected configurations

NVD
Node
gemds_pulsenetRange≤3.2.1
Node
gemds_pulsenetRange≤3.2.1enterprise

Related

zdi 6
checkpoint_advisories 1
cvelist 1
prion 1
cve 1
ics 1
zdi
zdi
GE MDS PulseNET MagnumEmulator Servlet XML External Entity Processing Information Disclosure Vulnerability
2018-06-06 00:00:00
GE MDS PulseNET FglAMServlet XML External Entity Processing Information Disclosure Vulnerability
2018-06-06 00:00:00
GE MDS PulseNET IntegrationXMLProcessorServlet UpdateProblemTickets XML External Entity Processing Information Disclosure Vulnerability
2018-06-07 00:00:00
checkpoint_advisories
checkpoint_advisories
GE MDS PulseNET XML External Entity Expansion (CVE-2018-10613)
2022-11-24 00:00:00
cvelist
cvelist
CVE-2018-10613
2018-05-31 00:00:00
prion
prion
Xxe
2018-06-04 14:29:00
cve
cve
CVE-2018-10613
2018-06-04 14:29:00
ics
ics
GE MDS PulseNET and MDS PulseNET Enterprise
2018-05-31 12:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.4%

JSON
Related for NVD:CVE-2018-10613
zdi6checkpoint_advisories1cvelist1prion1cve1ics1