CVE-2018-12471

A External Entity Reference ('XXE') vulnerability in SUSE Linux SMT allows remote attackers to read data from the server or cause DoS by referencing blocking elements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.

Score

CVSS 3.0 8.1 High

Status

Modified - security@opentext.com

Published

2018-10-04

Last modified

2024-09-17

Weaknesses

CWE-611

Affected products

• Subscription Management Tool (Suse)
• Smt (Suse Linux)

References

• https://bugzilla.suse.com/show_bug.cgi?id=1103809