CVE-2018-15805: XEE
Published Dec 10, 2018
·Updated
Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity (XXE) vulnerability, allowing an attacker to read arbitrary files or cause a denial of service (resource consumption).
Affected Software
1 affected component
Accusoft PrizmDoc<13.5
Event History
Dec 10, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-15805?
CVE-2018-15805 is considered a high severity vulnerability due to its potential for unauthorized file access and denial of service.
2
How do I fix CVE-2018-15805?
To fix CVE-2018-15805, upgrade to Accusoft PrizmDoc version 13.5 or later.
3
What type of vulnerability is CVE-2018-15805?
CVE-2018-15805 is classified as an XML External Entity (XXE) vulnerability.
4
What can an attacker achieve with CVE-2018-15805?
An attacker can read arbitrary files or cause a denial of service using CVE-2018-15805.
5
Which software versions are affected by CVE-2018-15805?
CVE-2018-15805 affects all versions of Accusoft PrizmDoc prior to 13.5.