CVE-2018-10600

SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input to be passed to the XML parser, which may allow disclosure and retrieval of arbitrary data, arbitrary code execution (in certain situations on specific platforms), and denial of service attacks.
References
Link Resource
https://ics-cert.us-cert.gov/advisories/ICSA-18-191-02 Third Party Advisory US Government Resource
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:selinc:acselerator_architect:*:*:*:*:*:*:*:*

Information

Published : 2018-07-24 06:29

Updated : 2019-10-09 16:32


NVD link : CVE-2018-10600

Mitre link : CVE-2018-10600


JSON object : View

CWE
CWE-611

Improper Restriction of XML External Entity Reference

Advertisement

dedicated server usa

Products Affected

selinc

  • acselerator_architect