A vulnerability in the web-based user interface of Cisco Energy Management Suite Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by convincing a user of an affected system to import a crafted XML file with malicious entries, which could allow the attacker to read and write files within the affected application.
History

Tue, 26 Nov 2024 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2018-11-08T18:00:00Z

Updated: 2024-11-26T14:22:01.476Z

Reserved: 2018-08-17T00:00:00

Link: CVE-2018-15444

cve-icon Vulnrichment

Updated: 2024-08-05T09:54:03.414Z

cve-icon NVD

Status : Modified

Published: 2018-11-08T18:29:00.303

Modified: 2024-11-21T03:50:48.980

Link: CVE-2018-15444

cve-icon Redhat

No data.