CVE-2022-41696

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file...

VISAM VBASE Automation Base

1. EXECUTIVE SUMMARY CVSS v3 5.5 ATTENTION: Low attack complexity Vendor: VISAM Equipment: VBASE Vulnerabilities: Improper Restriction of XML External Entity Reference 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to obtain sensitive information from...

CVE-2022-41696 CVE-2022-41696

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file...

CVE-2022-41696

VBASE VISAM Automation Base (VBASE) versions prior to 11.7.5 are affected by an XML External Entity (XXE) processing flaw in the FB.XML file parsing, leading to information disclosure when a valid user opens a specially crafted file. Impact is information disclosure with CVSS v3.1 base score 5.5 ...