Lucene search
Veracode Vulnerability DatabaseVERACODE:7001HistoryJul 10, 2018 - 5:40 a.m.
XML External Entity (XXE) Injection
2018-07-1005:40:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
0.002 Low
EPSS
Percentile
57.1%
Onos Controller is vulnerable to XML external entitiy (XXE) injection attack. It is possible because the application does not disable Document Type Definition (DTD) External Entities by default, allowing a malicious user to inject malicious external entities through XML files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| onos-providers-netconf-alarm | le | 1.8.9 |
Related
cve
cve
CVE-2018-1000614
2022-10-03 16:21:59
cvelist
cvelist
CVE-2018-1000614
2022-10-03 16:21:59
nvd
nvd
CVE-2018-1000614
2018-07-09 20:29:00
prion
prion
Xxe
2018-07-09 20:29:00
osv
osv
CVE-2018-1000614
2018-07-09 20:29:00