Cisco Prime Home Web-Based User Interface XML External Entity Vulnerability (cisco-sa-20160921-cph)

A vulnerability in the web-based user interface of Cisco Prime Home could allow an unauthenticated, remote attacker to have read access to part of the information stored in the affected system. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced...

CVE-2016-6408

Cisco Prime Home 5.2.0 is affected by CVE-2016-6408, an XML External Entity (XXE) vulnerability in the Web-Based User Interface that could allow an unauthenticated, remote attacker to read arbitrary files via a crafted XML payload. The issue is due to improper handling of external entities when p...