Vulnerability Details CVE-2018-10077
XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.118
EPSS Ranking 93.4%
CVSS Severity
CVSS v3 Score 4.9
CVSS v2 Score 4.0
References
- http://packetstormsecurity.com/files/147253/Geist-WatchDog-Console-3.2.2-XSS-XML-Injection-Insecure-Permissions.html
- https://www.exploit-db.com/exploits/44493/
- http://packetstormsecurity.com/files/147253/Geist-WatchDog-Console-3.2.2-XSS-XML-Injection-Insecure-Permissions.html
- https://www.exploit-db.com/exploits/44493/
Products affected by CVE-2018-10077
-
cpe:2.3:o:vertiv:watchdog_console:3.2.2