Description


Netcad KEOS 1.0 is vulnerable to XML External Entity (XXE) resulting in SSRF with XXE (remote).

Related CPE's


Vulnerable

Weaknesses



CWE-611

134c704f-9b21-4f2e-91b3-4a467353bcc0

Secondary

CWE-611

CVSS impact metrics


CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 · Critical

Information


Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-01-31T22:15:09.490Z

3 years ago

Last modified

2025-03-27T14:15:40.257Z

11 months ago