PT-2018-10002

Name of the Vulnerable Software and Affected Versions GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior Description The issue allows unauthenticated users to launch applications and support remote code execution through web services. This is due to the deserialization of untrust...

CVE-2018-10613: Improper Restriction of XML External Entity Reference

Multiple variants of XML External Entity XXE attacks may be used to exfiltrate data from the host Windows platform in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior...