CVE-2015-3623

XML external entity (XXE) vulnerability in QlikTech Qlikview before 11.20 SR12 allows remote attackers to conduct server-side request forgery (SSRF) attacks…

published September 16, 2015

CVSS
—
EPSS
16%
Percentile
96.9
In the wild
Unconfirmed
What it is

XML external entity (XXE) vulnerability in QlikTech Qlikview before 11.20 SR12 allows remote attackers to conduct server-side request forgery (SSRF) attacks and read arbitrary files via crafted XML data in a request to AccessPoint.aspx.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.15760 · 96.9th percentile
Published
2015-09-16T18:00Z
EPSS history
Timeline
  • 16 SEP 18:00Z
    XML external entity (XXE) vulnerability in QlikTech Qlikview before 11.20 SR12 allows remote attackers to conduct server-side request forgery (SSRF) attacks…
    cvelistv5