CVE-2018-17150

InterSystems Cache 2017.2.2.865.0 is affected by CVE-2018-17150, a Cross-Site Scripting (XSS) vulnerability caused by insufficient validation of client-side data in the WEB application. The CNVD entry confirms the vulnerability in the same version and describes the risk as execution of client-sid...

CVE-2018-17152

This entry concerns Intersystems Cache 2017.2.2.865.0, which is reported to allow XML External Entity (XXE) processing. The vulnerability is identified as CVE-2018-17152. According to the provided data, the affected product/version is Intersystems Cache 2017.2.2.865.0, with XXE as the root issue....