Vulnerability Details CVE-2018-3881
An exploitable unauthenticated XML external injection vulnerability was identified in FocalScope v2416. A unauthenticated attacker could submit a specially crafted web request to FocalScope's server that could cause an XXE, and potentially result in data compromise.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.02
EPSS Ranking 82.8%
CVSS Severity
CVSS v3 Score 9.4
CVSS v2 Score 7.5
References
Products affected by CVE-2018-3881
-
cpe:2.3:a:focalscope:focalscope:2416