PT-2018-13218

CVE-2018-15805

Published

2018-12-10

Updated

2019-01-03

CVSS 3.1

9.1

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Accusoft PrizmDoc HTML5 Document Viewer versions prior to 13.5

Description The issue allows an attacker to read arbitrary files or cause a denial of service due to an XML external entity (XXE) vulnerability.

Recommendations For versions prior to 13.5, update to version 13.5 or later to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾