CVE-2019-13176

An issue was discovered in the 3CX Phone system (web) management console 12.5.44178.1002 through 12.5 SP2

published August 8, 2019

CVSS
—
EPSS
2%
Percentile
84.3
In the wild
Unconfirmed
What it is

An issue was discovered in the 3CX Phone system (web) management console 12.5.44178.1002 through 12.5 SP2. The Content.MainForm.wgx component is affected by XXE via a crafted XML document in POST data. There is potential to use this for SSRF (reading local files, outbound HTTP, and outbound DNS).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02461 · 84.3th percentile
Published
2019-08-08T13:26Z
EPSS history
Timeline
  • 08 AUG 13:26Z
    An issue was discovered in the 3CX Phone system (web) management console 12.5.44178.1002 through 12.5 SP2
    cvelistv5