Loading vulnerability details…
CVSS v3.1
N/A
EPSS
6.02%
Published
Jan 2, 2019
Modified
Nov 21, 2024
Public PoC / Exploit (2)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
The SaveUserSettings service in Content Manager in SDL Web 8.5.0 has an XXE Vulnerability that allows reading sensitive files from the system.
Weaknesses (CWE)
Affected Products (1)
References (4)