CVE-2017-1000496

2018-01-0314:29:00

Google

osv.dev

8.8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.5%

JSON

Commsy version 9.0.0 is vulnerable to XXE attacks in the configuration import functionality resulting in denial of service and possibly remote execution of code.

CPENameOperatorVersion
commsyeqRel-7-1-2-2
commsyeq8.6.0
commsyeqRel-7-5-2
commsyeqRel-7-0-0-1
commsyeq8.0.5
commsyeq8.6.1
commsyeq8.5.2
commsyeqRel-6-1-3-2
commsyeq8.1.7
commsyeq8.1.4

Name	Operator	Version
commsy	eq	Rel-7-1-2-2
commsy	eq	8.6.0
commsy	eq	Rel-7-5-2
commsy	eq	Rel-7-0-0-1
commsy	eq	8.0.5
commsy	eq	8.6.1
commsy	eq	8.5.2
commsy	eq	Rel-6-1-3-2
commsy	eq	8.1.7
commsy	eq	8.1.4

Rows per page:

1-10 of 1451

References

github.com/commsy/commsy/issues/2