CVE-2015-2346 | BDVDB-2026-69468 Detail

Description#

XML external entity (XXE) vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022 allows remote authenticated users to read arbitrary files via the req parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://seclists.org/fulldisclosure/2015/Apr/42
http://packetstormsecurity.com/files/131459/Huawei-SEQ-Analyst-XXE-Injection.html

Exploit#

No public exploit known

History#

Version 12015-05-18Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.