A vulnerability in the web-based user interface of Cisco Energy Management Suite Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by convincing a user of an affected system to import a crafted XML file with malicious entries, which could allow the attacker to read and write files within the affected application.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2018-11-08T18:00:00Z

Updated: 2024-09-16T17:48:00.875Z

Reserved: 2018-08-17T00:00:00

Link: CVE-2018-15444

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-11-08T18:29:00.303

Modified: 2019-10-09T23:35:38.577

Link: CVE-2018-15444

cve-icon Redhat

No data.