CVE-2017-6323
CVE-2017-6323
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.5%KEV nãoPoC —Patch —
Lifecycle
16 Apr 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The Symantec Management Console prior to ITMS 8.1 RU1, ITMS 8.0_POST_HF6, and ITMS 7.6_POST_HF7 has an issue whereby XML input containing a reference to an external entity is processed by a weakly configured XML parser. This attack may lead to the disclosure of confidential data, denial of service, server side request forgery, port scanning from the perspective of the machine where the parser is located, and other system impacts.
Affected products
Symantec Corporation · ITMSWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →