Vulnerabilities (CVE)

Filtered by vendor Episerver Subscribe
Filtered by product Episerver
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-17762 1 Episerver 1 Episerver 2018-11-08 5.0 MEDIUM 7.5 HIGH
XML external entity (XXE) vulnerability in Episerver 7 patch 4 and earlier allows remote attackers to read arbitrary files via a crafted DTD in an XML request involving util/xmlrpc/Handler.ashx.