CVE-2019-3722

XML External Entity (XXE) Injection Vulnerability

High · published June 6, 2019

CVSS v3.0
7.5
EPSS
4%
Percentile
89.9
In the wild
Unconfirmed
What it is

Dell EMC OpenManage Server Administrator (OMSA) versions prior to 9.1.0.3 and prior to 9.2.0.4 contain an XML external entity (XXE) injection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to read arbitrary server system files by supplying specially crafted document type definitions (DTDs) in an XML request.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.03781 · 89.9th percentile
Published
2019-06-06T19:13Z
EPSS history
Timeline
  • 06 JUN 19:13Z
    XML External Entity (XXE) Injection Vulnerability
    cvelistv5