CoreCVE
Back

CRITICAL

XML External Entity (XXE) vulnerability in the web service in Dialogic PowerMedia XMS before 3.5 SU2 allows remote attackers to read arbitrary files or cause a denial of service (resource consumption)

Published Jul 3, 2018

Description

XML External Entity (XXE) vulnerability in the web service in Dialogic PowerMedia XMS before 3.5 SU2 allows remote attackers to read arbitrary files or cause a denial of service (resource consumption).

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-611

XXE

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jul 3, 2018
Updated Aug 5, 2024
Reserved May 31, 2018
Link CVE-2018-11640
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-11640
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-11640