[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

253164

 
 

909

 
 

197077

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

XML external entity (XXE) injection vulnerability in Dell EMC OpenManage Server Administrator - CVE-2019-3722

ID: oval:org.secpod.oval:def:89638Date: (C)2023-05-03   (M)2023-05-03
Class: VULNERABILITYFamily: windows




The host is installed with Dell EMC OpenManage Server Administrator before 9.1.0.3 or 9.2.x before 9.2.0.4 and is prone to an XML external entity (XXE) injection vulnerability. A flaw is present in the application, which fails to properly handle a specially crafted document type definitions (DTDs) in an XML request. Successful exploitation could allow an attacker to exploit this vulnerability to read arbitrary server system files.

Platform:
Microsoft Windows 7
Microsoft Windows 8.1
Microsoft Windows 10
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows 11
Product:
Dell EMC OpenManage Server Administrator
Reference:
CVE-2019-3722
CVE    1
CVE-2019-3722

© SecPod Technologies