CVE-2016-5795

An XXE issue was discovered in Automated Logic Corporation (ALC) Liebert SiteScan Web Version 6.5 and prior, ALC WebCTRL Version 6.5 and prior, and Carrier…

published August 31, 2017

CVSS
—
EPSS
2%
Percentile
82.6
In the wild
Unconfirmed
What it is

An XXE issue was discovered in Automated Logic Corporation (ALC) Liebert SiteScan Web Version 6.5 and prior, ALC WebCTRL Version 6.5 and prior, and Carrier i-Vu Version 6.5 and prior. An attacker could enter malicious input to WebCTRL, i-Vu, or SiteScan Web through a weakly configured XML parser causing the application to execute arbitrary code or disclose file contents from a server or connected network.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02239 · 82.6th percentile
Published
2017-08-31T21:00Z
EPSS history
Timeline
  • 31 AUG 21:00Z
    An XXE issue was discovered in Automated Logic Corporation (ALC) Liebert SiteScan Web Version 6.5 and prior, ALC WebCTRL Version 6.5 and prior, and Carrier…
    cvelistv5