CVE-2016-8348: XEE
An XML External Entity (XXE) issue was discovered in Emerson Liebert SiteScan Web Version 6.5, and prior. An attacker may enter malicious input to Liebert SiteScan through a weakly configured XML parser causing the application to execute arbitrary code or disclose file contents from a server or connected network.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8348?
CVE-2016-8348 is classified as a critical vulnerability due to its potential to allow arbitrary code execution.
How do I fix CVE-2016-8348?
To remediate CVE-2016-8348, update Emerson Liebert SiteScan Web to version 6.6 or later, which includes patches for the vulnerability.
What types of attacks can be executed through CVE-2016-8348?
CVE-2016-8348 can be exploited for XML External Entity attacks, leading to arbitrary code execution and potential disclosure of sensitive files.
Which versions of Emerson Liebert SiteScan Web are affected by CVE-2016-8348?
CVE-2016-8348 affects Emerson Liebert SiteScan Web version 6.5 and all prior versions.
Is CVE-2016-8348 a widely exploited vulnerability?
At the time of its discovery, CVE-2016-8348 was considered a significant risk, leading to advisories from cybersecurity organizations.