CVE-2021-32972CWE-611

Panasonic FPWIN Pro, all Versions 7.5.1.1 and prior, allows an attacker to craft a project file specifying a URI that causes the XML parser to access the URI…

published July 9, 2021

CVSS
—
EPSS
1%
Percentile
52.4
In the wild
Unconfirmed
What it is

Panasonic FPWIN Pro, all Versions 7.5.1.1 and prior, allows an attacker to craft a project file specifying a URI that causes the XML parser to access the URI and embed the contents, which may allow the attacker to disclose information that is accessible in the context of the user executing software.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00695 · 52.4th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2021-07-09T10:13Z
EPSS history
Timeline
  • 09 JUL 10:13Z
    Panasonic FPWIN Pro, all Versions 7.5.1.1 and prior, allows an attacker to craft a project file specifying a URI that causes the XML parser to access the URI…
    cvelistv5