CVE-2021-37178CWE-611

A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7)

published August 10, 2021

CVSS
—
EPSS
1%
Percentile
60.1
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). An XML external entity injection vulnerability in the underlying XML parser could cause the affected application to disclose arbitrary files to remote attackers by loading a specially crafted xml file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00924 · 60.1th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2021-08-10T10:35Z
EPSS history
Timeline
  • 10 AUG 10:35Z
    A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7)
    cvelistv5