CVE-2018-12471 Vulnerability Details

  /     /     /  

CVE-2018-12471 Metadata Quick Info

CVE Published: 04/10/2018 | CVE Updated: 17/09/2024 | CVE Year: 2018
Source: microfocus | Vendor: SUSE Linux | Product: SMT
Status : PUBLISHED

---

CVE-2018-12471 Description

A External Entity Reference (\'XXE\') vulnerability in SUSE Linux SMT allows remote attackers to read data from the server or cause DoS by referencing blocking elements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-611
CWE Name: CWE-611: Improper Restriction of XML External Entity Reference ( XXE )
Source: SUSE Linux

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).