7.5
CVE-2021-42537
- EPSS 0.41%
- Veröffentlicht 27.07.2022 21:15:08
- Zuletzt bearbeitet 17.04.2025 16:15:23
- Quelle ics-cert@hq.dhs.gov
- CVE-Watchlists
- Unerledigt
LoginVISAM VBASE Editor Improper Restriction of XML
VISAM VBASE version 11.6.0.6 processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Visam ≫ Vbase Web-remote Version11.6.0.6
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.41% | 0.323 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| ics-cert@hq.dhs.gov | 5.9 | 1.6 | 4.2 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N
|
CWE-611 Improper Restriction of XML External Entity Reference
The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.
https://www.cisa.gov/uscert/ics/advisories/icsa-21-308-01