CVE-2017-1000496

Commsy 9.0.0 is vulnerable to XXE attacks via the configuration import feature, causing denial of service and possibly remote code execution. Root cause described as an XXE issue in the import workflow. The connected documents confirm the affected product/version and impact but do not provide exp...

CVE-2017-1000496

Commsy version 9.0.0 is vulnerable to XXE attacks in the configuration import functionality resulting in denial of service and possibly remote execution of code...

PT-2018-5260

Name of the Vulnerable Software and Affected Versions Commsy version 9.0.0 Description The issue affects the configuration import functionality, making it vulnerable to XXE attacks. This can result in denial of service and possibly allow remote execution of code. Recommendations For Commsy versio...

CVE-2017-1000496: Improper Restriction of XML External Entity Reference

Commsy version 9.0.0 is vulnerable to XXE attacks in the configuration import functionality resulting in denial of service and possibly remote execution of code...