CVE-2018-19371

The SaveUserSettings service in Content Manager in SDL Web 8.5.0 has an XXE Vulnerability that allows reading sensitive files from the system

published January 2, 2019

CVSS
—
EPSS
6%
Percentile
93.3
In the wild
Unconfirmed
What it is

The SaveUserSettings service in Content Manager in SDL Web 8.5.0 has an XXE Vulnerability that allows reading sensitive files from the system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06017 · 93.3th percentile
Published
2019-01-02T18:00Z
EPSS history
Timeline
  • 02 JAN 18:00Z
    The SaveUserSettings service in Content Manager in SDL Web 8.5.0 has an XXE Vulnerability that allows reading sensitive files from the system
    cvelistv5