Lucene search
+L

3 matches found

VulnCheck KEV
VulnCheck KEV
•added 2024/01/22 12:00 a.m.•11 views

VulnCheck KEV: CVE-2021-27931

LumisXP aka Lumis Experience Platform before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp. One can send a request crafted with an XXE payload and achieve outcomes such as reading local server files or denial of service...

9.1CVSS8.2AI score0.18132EPSS
SaveIn wildExploits1References545
attackerkb
attackerkb
•added 2021/03/03 8:15 p.m.•13 views

CVE-2021-27931

LumisXP aka Lumis Experience Platform before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp. One can send a request crafted with an XXE payload and achieve outcomes such as reading local server files or denial of service...

9.1CVSS8.2AI score0.18132EPSS
SaveExploits1References3
CVE
CVE
•added 2021/03/03 7:38 p.m.•119 views

CVE-2021-27931

LumisXP

9.1CVSS8.8AI score0.18132EPSS
SaveIn wildExploits1References1Affected Software1
Rows per page
Query Builder