Vulnerability Details CVE-2018-15362
XXE in GE Proficy Cimplicity GDS versions 9.0 R2, 9.5, 10.0
Exploit prediction scoring system (EPSS) score
EPSS Score 0.022
EPSS Ranking 83.7%
CVSS Severity
CVSS v3 Score 9.1
CVSS v2 Score 6.4
References
- http://www.securityfocus.com/bid/106133
- https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/07/klcert-18-025-general-electric-proficy-gds-xml-external-entity-xxe/
- https://ics-cert.us-cert.gov/advisories/ICSA-18-340-01
- http://www.securityfocus.com/bid/106133
- https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/07/klcert-18-025-general-electric-proficy-gds-xml-external-entity-xxe/
- https://ics-cert.us-cert.gov/advisories/ICSA-18-340-01
Products affected by CVE-2018-15362
-
cpe:2.3:a:ge:cimplicity:10.0
-
cpe:2.3:a:ge:cimplicity:9.0_r2
-
cpe:2.3:a:ge:cimplicity:9.5