CVE-2018-8819

An XXE issue was discovered in Automated Logic Corporation (ALC) WebCTRL Versions 6.0, 6.1 and 6.5

published June 14, 2018

CVSS
—
EPSS
3%
Percentile
86.9
In the wild
Unconfirmed
What it is

An XXE issue was discovered in Automated Logic Corporation (ALC) WebCTRL Versions 6.0, 6.1 and 6.5. An unauthenticated attacker could enter malicious input to WebCTRL and a weakly configured XML parser will allow the application to disclose full file contents from the underlying web server OS via the "X-Wap-Profile" HTTP header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02906 · 86.9th percentile
Published
2018-06-14T20:00Z
EPSS history
Timeline
  • 14 JUN 20:00Z
    An XXE issue was discovered in Automated Logic Corporation (ALC) WebCTRL Versions 6.0, 6.1 and 6.5
    cvelistv5