CVE-2018-11640

XML External Entity (XXE) vulnerability in the web service in Dialogic PowerMedia XMS before 3.5 SU2 allows remote attackers to read arbitrary files or cause a denial of service (resource consumption).

Score

CVSS 3.0 9.1 Critical

Status

Modified - cve@mitre.org

Published

2018-07-03

Last modified

2024-08-05

Weaknesses

CWE-611

Affected products

• Powermedia Xms (Dialogic)

References

• https://d3adend.org/blog/?p=1398