CVE-2020-7572CWE-611

A CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause…

published November 19, 2020

CVSS
—
EPSS
2%
Percentile
78.4
In the wild
Unconfirmed
What it is

A CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to inject arbitrary XML code and obtain disclosure of confidential data, denial of service, server side request forgery due to improper configuration of the XML parser.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01805 · 78.4th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2020-11-19T21:02Z
EPSS history
Timeline
  • 19 NOV 21:02Z
    A CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause…
    cvelistv5