CVE-2018-11048
- State
- Published
- Severity
- Not scored
- Published
- Aug 10, 2018
- Updated
- Sep 17, 2024
- Reserved
- May 14, 2018
Description
Dell EMC Data Protection Advisor, versions 6.2, 6,3, 6.4, 6.5 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 contain a XML External Entity (XXE) Injection vulnerability in the REST API. An authenticated remote malicious user could potentially exploit this vulnerability to read certain system files in the server or cause denial of service by supplying specially crafted Document Type Definitions (DTDs) in an XML request.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Data Protection AdvisorDell EMC |
|
Integrated Data Protection ApplianceDell EMC |
|
References
- 105130vdb-entry
- 20180803 DSA-2018-112: Dell EMC Data Protection Advisor XML External Entity Vulnerabilitymailing-list
- 1041417vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.