What the vulnerability does
01Description
An unauthenticated XML external entity injection (XXE) vulnerability exists in LXCA's Common Information Model (CIM) server that could result in read-only access to specific files.
CVSS base score
8.2/10
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Key dates
02Disclosure timeline
June 26, 2023
CVE published
December 3, 2024
Record updated
External resources
