CVE-2018-12471CWE-611

External Entity processing in the RegistrationSharing module

Medium · published October 4, 2018

CVSS v3.0
6.5
EPSS
2%
Percentile
74.5
In the wild
Unconfirmed
What it is

A External Entity Reference ('XXE') vulnerability in SUSE Linux SMT allows remote attackers to read data from the server or cause DoS by referencing blocking elements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01529 · 74.5th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2018-10-04T14:00Z
EPSS history
Timeline
  • 04 OCT 14:00Z
    External Entity processing in the RegistrationSharing module
    cvelistv5