Security Advisory

CVE-2016-5795

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-08-31 21:00:00

Last updated 2024-08-06 01:15:10

Assigner icscert

CVSS score not scored

State PUBLISHED

Description

An XXE issue was discovered in Automated Logic Corporation (ALC) Liebert SiteScan Web Version 6.5 and prior, ALC WebCTRL Version 6.5 and prior, and Carrier i-Vu Version 6.5 and prior. An attacker could enter malicious input to WebCTRL, i-Vu, or SiteScan Web through a weakly configured XML parser causing the application to execute arbitrary code or disclose file contents from a server or connected network.

← Browse all CVEs View on cve.org ↗