Management Console
CVE-2018-10175
MEDIUM
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
1DescriptionNVD
Digital Guardian Management Console 7.1.2.0015 has an XXE issue.
AnalysisAI
Digital Guardian Management Console 7.1.2.0015 has an XXE issue. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified as XML External Entity (XXE) (CWE-611), which allows attackers to read arbitrary files or perform SSRF through XML processing. Digital Guardian Management Console 7.1.2.0015 has an XXE issue. Affected products include: Digitalguardian Management Console.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Disable external entity processing in XML parsers, use JSON instead of XML where possible.
More in Management Console
View allDigital Guardian Management Console 7.1.2.0015 allows authenticated remote code execution because of Arbitrary File Uplo
Use-after-free vulnerability in the Update Manager service in Avira Management Console allows remote attackers to execut
Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue. Rated medium severity (CVSS 6.5), this v
Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve pr
Prior to ITMS 8.1 RU4, the Symantec Management Console can be susceptible to a directory traversal exploit, which is a t
Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbitrary files vi
Share
External POC / Exploit Code
Leaving vuln.today