CVE-2015-0581 | BDVDB-2026-67716 Detail

Description#

The XML parser in Cisco Prime Service Catalog before 10.1 allows remote authenticated users to read arbitrary files or cause a denial of service (CPU and memory consumption) via an external entity declaration in conjunction with an entity reference, as demonstrated by reading private keys, related to an XML External Entity (XXE) issue, aka Bug ID CSCup92880.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150128-psc-xmlee
http://www.securityfocus.com/bid/72350
http://www.securitytracker.com/id/1031658

Exploit#

No public exploit known

History#

Version 12015-01-28Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.