CVE-2015-2346

2015-05-1815:00:00

mitre

www.cve.org

AI Score

6.3

Confidence

Low

EPSS

0.002

Percentile

52.4%

JSON

XML external entity (XXE) vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022 allows remote authenticated users to read arbitrary files via the req parameter.

References

packetstormsecurity.com/files/131459/Huawei-SEQ-Analyst-XXE-Injection.html

seclists.org/fulldisclosure/2015/Apr/42