CVE-2015-3000

SysAid Help Desk before 15.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of nested entity references…

published June 8, 2015

CVSS
—
EPSS
8%
Percentile
94.7
In the wild
Unconfirmed
What it is

SysAid Help Desk before 15.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of nested entity references in an XML document to (1) /agententry, (2) /rdsmonitoringresponse, or (3) /androidactions, aka an XML Entity Expansion (XEE) attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07977 · 94.7th percentile
Published
2015-06-08T14:00Z
EPSS history
Timeline
  • 08 JUN 14:00Z
    SysAid Help Desk before 15.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of nested entity references…
    cvelistv5