CVE-2018-17169

HIGH Year: 2018
CVSS v3 Score
7.7
High
CVSS v2 Score
4.0
Medium
Weakness Type
CWE-611
View all →

Vulnerability Description

An XML external entity (XXE) vulnerability in PrinterOn version 4.1.4 and lower allows remote authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.

Related Vulnerabilities

CVE-2016-7459

HIGH
CVSS:7.7(High)

VMware vCenter Server 5.5 before U3e and 6.0 before U2a allows remote authenticated users to read arbitrary files via a (1) Log Browser, (2) Distributed Switch setup, or (3) Content Library XML docume...

CWE-6112016

CVE-2020-13692

HIGH
CVSS:7.7(High)

PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.

CWE-6112020

CVE-2021-27604

HIGH
CVSS:7.7(High)

In order to prevent XML External Entity vulnerability in SAP NetWeaver ABAP Server and ABAP Platform (Process Integration - Enterprise Service Repository JAVA Mappings), versions - 7.10, 7.20, 7.30, 7...

CWE-6112021

CVE-2021-42776

HIGH
CVSS:7.7(High)

CloverDX Server before 5.11.2 and and 5.12.x before 5.12.1 allows XXE during configuration import.

CWE-6112021

CVE-2023-27480

HIGH
CVSS:7.7(High)

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with edit rights on a document can trigger an XAR import on a for...

CWE-6112023

CVE-2023-50168

HIGH
CVSS:7.7(High)

Pega Platform from 6.x to 8.8.4 is affected by an XXE issue with PDF Generation.

CWE-6112023