CVE-2019-3752
- State
- Published
- Severity
- 8.2 High
- Published
- Jul 16, 2021
- Updated
- Sep 16, 2024
- Reserved
- Jan 3, 2019
Description
Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1, 2.2, 2.3 and 2.4. contain an XML External Entity(XXE) Injection vulnerability. A remote unauthenticated malicious user could potentially exploit this vulnerability to cause Denial of Service or information exposure by supplying specially crafted document type definitions (DTDs) in an XML request.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 8.2 High | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H | dell |
Weaknesses
- CWE-611 Improper Restriction of XML External Entity Reference ('XXE')
Affected Products
| Product | Versions |
|---|---|
AvamarDell |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.