CVEDB API

BlogEngine.NET 3.3.7 and earlier allows XXE via an apml file to syndication.axd.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 63.3%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2019-11392

Dotnetblogengine » Blogengine.net » Version: 1.4.5

cpe:2.3:a:dotnetblogengine:blogengine.net:1.4.5
Dotnetblogengine » Blogengine.net » Version: 1.5

cpe:2.3:a:dotnetblogengine:blogengine.net:1.5
Dotnetblogengine » Blogengine.net » Version: 1.6

cpe:2.3:a:dotnetblogengine:blogengine.net:1.6
Dotnetblogengine » Blogengine.net » Version: 2.0

cpe:2.3:a:dotnetblogengine:blogengine.net:2.0
Dotnetblogengine » Blogengine.net » Version: 2.5

cpe:2.3:a:dotnetblogengine:blogengine.net:2.5
Dotnetblogengine » Blogengine.net » Version: 2.6

cpe:2.3:a:dotnetblogengine:blogengine.net:2.6
Dotnetblogengine » Blogengine.net » Version: 2.7

cpe:2.3:a:dotnetblogengine:blogengine.net:2.7
Dotnetblogengine » Blogengine.net » Version: 2.8

cpe:2.3:a:dotnetblogengine:blogengine.net:2.8