CVE-2021-42537

VISAM VBASE Editor Improper Restriction of XML

Medium · published July 27, 2022

CVSS v3.1
5.9
EPSS
1%
Percentile
43.6
In the wild
Unconfirmed
What it is

VISAM VBASE version 11.6.0.6 processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00524 · 43.6th percentile
Published
2022-07-27T20:20Z
EPSS history
Timeline
  • 27 JUL 20:20Z
    VISAM VBASE Editor Improper Restriction of XML
    cvelistv5