2 matches found
Design/Logic Flaw
Altova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an InfoSetChanges/Changes attack against /workflowmanagement, or reading mobiletogetherserver.cfg and then reading the certificate and private key...
6.4CVSS7.8AI score0.66278EPSS
SaveExploits4References4Affected Software1
CVE-2021-37425: Improper Restriction of XML External Entity Reference
Altova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an InfoSetChanges/Changes attack against /workflowmanagement, or reading mobiletogetherserver.cfg and then reading the certificate and private key...
9.1CVSS5.8AI score0.66278EPSS
SaveExploits4References2
20