CVE-2018-17186

2018-11-0600:00:00

apache

www.cve.org

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.1%

JSON

An administrator with workflow definition entitlements can use DTD to perform malicious operations, including but not limited to file read, file write, and code execution.

CNA Affected

[
  {
    "product": "Apache Syncope",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "Apache Syncope releases prior to 2.0.11 and 2.1.2"
      }
    ]
  }
]