CVE-2019-15641

xmlrpc.cgi in Webmin through 1.930 allows authenticated XXE attacks

published August 26, 2019

CVSS
—
EPSS
1%
Percentile
73.2
In the wild
Unconfirmed
What it is

xmlrpc.cgi in Webmin through 1.930 allows authenticated XXE attacks. By default, only root, admin, and sysadm can access xmlrpc.cgi.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01452 · 73.2th percentile
Published
2019-08-26T17:07Z
EPSS history
Timeline
  • 26 AUG 17:07Z
    xmlrpc.cgi in Webmin through 1.930 allows authenticated XXE attacks
    cvelistv5