CVE-2018-1077

CVE-2018-1077

Vendor Spacewalk

Product spacewalk

Weakness CWE-611 · XXE

Published March 14, 2018

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Spacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially sensitive information from the server.

Key dates

02Disclosure timeline

March 14, 2018 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-1077 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/611.html

Related vulnerabilities

04Related CVE

CVE-2015-10029 kelvinmo simplexrd simplexrd.class.php xml external entity reference CVE-2025-4641 XML External Entity (XXE) injection vulnerability in WebDriverManager CVE-2020-37192 MSN Password Recovery 1.30 - XML External Entity Injection CVE-2024-47582 XML Entity Expansion Vulnerability in SAP NetWeaver AS JAVA CVE-2024-56356