CVE-2017-1000496 - Commsy version 9.0.0 is vulnerable to XXE attacks in the configuration import functionality resulting in denial of service and possibly remote execution of code

Back Back to CVE browser

HIGH

Commsy version 9.0.0 is vulnerable to XXE attacks in the configuration import functionality resulting in denial of service and possibly remote execution of code

Published Jan 3, 2018

8.8

HIGH

CVSS 3.0

EPSS 1.74%

Description

Commsy version 9.0.0 is vulnerable to XXE attacks in the configuration import functionality resulting in denial of service and possibly remote execution of code.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-611

XXE

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-1608
Advisory
https://github.com/commsy/commsy/issues/2
x_refsource_CONFIRMIssue TrackingThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-1608		Advisory
https://github.com/commsy/commsy/issues/2		x_refsource_CONFIRMIssue TrackingThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 3, 2018

Updated Sep 17, 2024

Reserved Jan 3, 2018

Link CVE-2017-1000496

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-1000496

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jan 3, 2018

Updated Sep 17, 2024

Link EUVD-2017-1608

GitHub

No data