CVE-2018-17152: XEE
Published Jul 11, 2019
·Updated
Intersystems Cache 2017.2.2.865.0 allows XXE.
Affected Software
2 affected components
Intersystems Cache=2017.2.2.865.0
Intersystems Cache=2018.1.2
Event History
Jul 11, 2019
CVE Published
via MITRE·06:42 PM
Data Sourced
via MITRE·06:42 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-17152?
The severity of CVE-2018-17152 is medium, with a CVSS score of 6.4.
2
What is CVE-2018-17152?
CVE-2018-17152 refers to a vulnerability in InterSystems Cache 2017.2.2.865.0 that allows XXE (XML External Entity) attacks.
3
How does CVE-2018-17152 affect InterSystems Cache?
CVE-2018-17152 affects InterSystems Cache versions 2017.2.2.865.0 and 2018.1.2 by allowing XXE (XML External Entity) attacks.
4
Is there a fix available for CVE-2018-17152?
Yes, a fix is available for CVE-2018-17152. It is recommended to update to a patched version of InterSystems Cache.
5
Where can I find more information about CVE-2018-17152?
You can find more information about CVE-2018-17152 at the following reference: [Link](https://know.bishopfox.com/advisories/intersystems-cache-2017-2-2-865-0-vulnerabilities)