CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-20298

S3 Browser before 8.1.5 contains an XML external entity (XXE) vulnerability, allowing remote attackers to read arbitrary files and obtain NTLMv2 hash values by tricking a user into connecting to a malicious server via the S3 protocol.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 64.3%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 4.3

References

Products affected by CVE-2018-20298

S3browser » S3 Browser » Version: 1.0.3

cpe:2.3:a:s3browser:s3_browser:1.0.3
S3browser » S3 Browser » Version: 1.2.5

cpe:2.3:a:s3browser:s3_browser:1.2.5
S3browser » S3 Browser » Version: 1.3.1

cpe:2.3:a:s3browser:s3_browser:1.3.1
S3browser » S3 Browser » Version: 1.3.7

cpe:2.3:a:s3browser:s3_browser:1.3.7
S3browser » S3 Browser » Version: 1.5.5

cpe:2.3:a:s3browser:s3_browser:1.5.5
S3browser » S3 Browser » Version: 1.5.9

cpe:2.3:a:s3browser:s3_browser:1.5.9
S3browser » S3 Browser » Version: 1.6.1

cpe:2.3:a:s3browser:s3_browser:1.6.1
S3browser » S3 Browser » Version: 1.7.1

cpe:2.3:a:s3browser:s3_browser:1.7.1
S3browser » S3 Browser » Version: 1.7.5

cpe:2.3:a:s3browser:s3_browser:1.7.5
S3browser » S3 Browser » Version: 1.7.9

cpe:2.3:a:s3browser:s3_browser:1.7.9
S3browser » S3 Browser » Version: 1.8.3

cpe:2.3:a:s3browser:s3_browser:1.8.3
S3browser » S3 Browser » Version: 1.9.0

cpe:2.3:a:s3browser:s3_browser:1.9.0
S3browser » S3 Browser » Version: 1.9.3

cpe:2.3:a:s3browser:s3_browser:1.9.3
S3browser » S3 Browser » Version: 1.9.5

cpe:2.3:a:s3browser:s3_browser:1.9.5
S3browser » S3 Browser » Version: 1.9.7

cpe:2.3:a:s3browser:s3_browser:1.9.7
S3browser » S3 Browser » Version: 2.0.0

cpe:2.3:a:s3browser:s3_browser:2.0.0
S3browser » S3 Browser » Version: 2.1.7

cpe:2.3:a:s3browser:s3_browser:2.1.7
S3browser » S3 Browser » Version: 2.2.0

cpe:2.3:a:s3browser:s3_browser:2.2.0
S3browser » S3 Browser » Version: 2.3.1

cpe:2.3:a:s3browser:s3_browser:2.3.1
S3browser » S3 Browser » Version: 2.3.5

cpe:2.3:a:s3browser:s3_browser:2.3.5
S3browser » S3 Browser » Version: 2.3.9

cpe:2.3:a:s3browser:s3_browser:2.3.9
S3browser » S3 Browser » Version: 2.4.5

cpe:2.3:a:s3browser:s3_browser:2.4.5
S3browser » S3 Browser » Version: 2.5.5

cpe:2.3:a:s3browser:s3_browser:2.5.5
S3browser » S3 Browser » Version: 2.5.6

cpe:2.3:a:s3browser:s3_browser:2.5.6
S3browser » S3 Browser » Version: 2.6.3

cpe:2.3:a:s3browser:s3_browser:2.6.3
S3browser » S3 Browser » Version: 2.7.1

cpe:2.3:a:s3browser:s3_browser:2.7.1
S3browser » S3 Browser » Version: 2.7.3

cpe:2.3:a:s3browser:s3_browser:2.7.3
S3browser » S3 Browser » Version: 2.7.7

cpe:2.3:a:s3browser:s3_browser:2.7.7
S3browser » S3 Browser » Version: 2.8.3

cpe:2.3:a:s3browser:s3_browser:2.8.3
S3browser » S3 Browser » Version: 2.8.5

cpe:2.3:a:s3browser:s3_browser:2.8.5
S3browser » S3 Browser » Version: 2.8.7

cpe:2.3:a:s3browser:s3_browser:2.8.7
S3browser » S3 Browser » Version: 2.8.9

cpe:2.3:a:s3browser:s3_browser:2.8.9
S3browser » S3 Browser » Version: 2.9.2

cpe:2.3:a:s3browser:s3_browser:2.9.2
S3browser » S3 Browser » Version: 2.9.5

cpe:2.3:a:s3browser:s3_browser:2.9.5
S3browser » S3 Browser » Version: 2.9.9

cpe:2.3:a:s3browser:s3_browser:2.9.9
S3browser » S3 Browser » Version: 3.1.1

cpe:2.3:a:s3browser:s3_browser:3.1.1
S3browser » S3 Browser » Version: 3.1.3

cpe:2.3:a:s3browser:s3_browser:3.1.3
S3browser » S3 Browser » Version: 3.1.5

cpe:2.3:a:s3browser:s3_browser:3.1.5
S3browser » S3 Browser » Version: 3.1.9

cpe:2.3:a:s3browser:s3_browser:3.1.9
S3browser » S3 Browser » Version: 3.2.1

cpe:2.3:a:s3browser:s3_browser:3.2.1
S3browser » S3 Browser » Version: 3.2.5

cpe:2.3:a:s3browser:s3_browser:3.2.5
S3browser » S3 Browser » Version: 3.3.1

cpe:2.3:a:s3browser:s3_browser:3.3.1
S3browser » S3 Browser » Version: 3.3.3

cpe:2.3:a:s3browser:s3_browser:3.3.3
S3browser » S3 Browser » Version: 3.3.9

cpe:2.3:a:s3browser:s3_browser:3.3.9
S3browser » S3 Browser » Version: 3.4.7

cpe:2.3:a:s3browser:s3_browser:3.4.7
S3browser » S3 Browser » Version: 3.4.8

cpe:2.3:a:s3browser:s3_browser:3.4.8
S3browser » S3 Browser » Version: 3.4.9

cpe:2.3:a:s3browser:s3_browser:3.4.9
S3browser » S3 Browser » Version: 3.5.5

cpe:2.3:a:s3browser:s3_browser:3.5.5
S3browser » S3 Browser » Version: 3.6.3

cpe:2.3:a:s3browser:s3_browser:3.6.3
S3browser » S3 Browser » Version: 3.6.7

cpe:2.3:a:s3browser:s3_browser:3.6.7
S3browser » S3 Browser » Version: 3.7.5

cpe:2.3:a:s3browser:s3_browser:3.7.5
S3browser » S3 Browser » Version: 3.7.7

cpe:2.3:a:s3browser:s3_browser:3.7.7
S3browser » S3 Browser » Version: 3.8.1

cpe:2.3:a:s3browser:s3_browser:3.8.1
S3browser » S3 Browser » Version: 3.8.3

cpe:2.3:a:s3browser:s3_browser:3.8.3
S3browser » S3 Browser » Version: 3.8.7

cpe:2.3:a:s3browser:s3_browser:3.8.7
S3browser » S3 Browser » Version: 3.9.1

cpe:2.3:a:s3browser:s3_browser:3.9.1
S3browser » S3 Browser » Version: 3.9.3

cpe:2.3:a:s3browser:s3_browser:3.9.3
S3browser » S3 Browser » Version: 3.9.9

cpe:2.3:a:s3browser:s3_browser:3.9.9
S3browser » S3 Browser » Version: 4.1.1

cpe:2.3:a:s3browser:s3_browser:4.1.1
S3browser » S3 Browser » Version: 4.3.1

cpe:2.3:a:s3browser:s3_browser:4.3.1
S3browser » S3 Browser » Version: 4.4.5

cpe:2.3:a:s3browser:s3_browser:4.4.5
S3browser » S3 Browser » Version: 4.5.7

cpe:2.3:a:s3browser:s3_browser:4.5.7
S3browser » S3 Browser » Version: 4.6.1

cpe:2.3:a:s3browser:s3_browser:4.6.1
S3browser » S3 Browser » Version: 4.7.7

cpe:2.3:a:s3browser:s3_browser:4.7.7
S3browser » S3 Browser » Version: 4.8.5

cpe:2.3:a:s3browser:s3_browser:4.8.5
S3browser » S3 Browser » Version: 4.9.5

cpe:2.3:a:s3browser:s3_browser:4.9.5
S3browser » S3 Browser » Version: 4.9.7

cpe:2.3:a:s3browser:s3_browser:4.9.7
S3browser » S3 Browser » Version: 5.1.1

cpe:2.3:a:s3browser:s3_browser:5.1.1
S3browser » S3 Browser » Version: 5.1.3

cpe:2.3:a:s3browser:s3_browser:5.1.3
S3browser » S3 Browser » Version: 5.3.5

cpe:2.3:a:s3browser:s3_browser:5.3.5
S3browser » S3 Browser » Version: 5.4.7

cpe:2.3:a:s3browser:s3_browser:5.4.7
S3browser » S3 Browser » Version: 5.4.9

cpe:2.3:a:s3browser:s3_browser:5.4.9
S3browser » S3 Browser » Version: 5.5.3

cpe:2.3:a:s3browser:s3_browser:5.5.3
S3browser » S3 Browser » Version: 5.7.1

cpe:2.3:a:s3browser:s3_browser:5.7.1
S3browser » S3 Browser » Version: 5.7.3

cpe:2.3:a:s3browser:s3_browser:5.7.3
S3browser » S3 Browser » Version: 5.8.9

cpe:2.3:a:s3browser:s3_browser:5.8.9
S3browser » S3 Browser » Version: 5.9.7

cpe:2.3:a:s3browser:s3_browser:5.9.7
S3browser » S3 Browser » Version: 6.0.7

cpe:2.3:a:s3browser:s3_browser:6.0.7
S3browser » S3 Browser » Version: 6.1.1

cpe:2.3:a:s3browser:s3_browser:6.1.1
S3browser » S3 Browser » Version: 6.2.3

cpe:2.3:a:s3browser:s3_browser:6.2.3
S3browser » S3 Browser » Version: 6.2.7

cpe:2.3:a:s3browser:s3_browser:6.2.7
S3browser » S3 Browser » Version: 6.4.1

cpe:2.3:a:s3browser:s3_browser:6.4.1
S3browser » S3 Browser » Version: 6.5.9

cpe:2.3:a:s3browser:s3_browser:6.5.9
S3browser » S3 Browser » Version: 7.1.1

cpe:2.3:a:s3browser:s3_browser:7.1.1
S3browser » S3 Browser » Version: 7.1.5

cpe:2.3:a:s3browser:s3_browser:7.1.5
S3browser » S3 Browser » Version: 7.4.5

cpe:2.3:a:s3browser:s3_browser:7.4.5
S3browser » S3 Browser » Version: 7.6.9

cpe:2.3:a:s3browser:s3_browser:7.6.9
S3browser » S3 Browser » Version: 7.7.7

cpe:2.3:a:s3browser:s3_browser:7.7.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-20298

Products

Pricing

Contact Us