CoreCVE
Back

HIGH

A CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to inject arbitrary XML code and obtain disclosure of confidential data, denial of service, server side request forgery due to improper configuration of the XML parser

Published Nov 19, 2020

Description

A CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to inject arbitrary XML code and obtain disclosure of confidential data, denial of service, server side request forgery due to improper configuration of the XML parser.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-611

XXE

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner schneider
Published Nov 19, 2020
Updated Aug 4, 2024
Reserved Jan 21, 2020
Link CVE-2020-7572
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-7572
Red Hat
Severity n/a
Public date n/a
Links CVE-2020-7572