5.9
Medium
CVE-2023-28828 A vulnerability has been identified in Polarion ALM (All versions < V22R2)
Description
A vulnerability has been identified in Polarion ALM (All versions < V22R2). The application contains a XML External Entity Injection (XXE) vulnerability. This could allow an attacker to view files on the application server filesystem.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Polarion ALM | Versions not published |
Other CVEs of Polarion ALM
The 6 CVEs of Polarion ALM →
CVE-2024-33647
A vulnerability has been identified in Polarion ALM (All versions < V2404.0)
6.5
Medium
CVE-2024-23813
A vulnerability has been identified in Polarion ALM (All versions < V2404.0)
7.3
High
CVE-2023-50236
A vulnerability has been identified in Polarion ALM (All versions < V2404.0)
7.8
High
CVE-2022-46265
A vulnerability has been identified in Polarion ALM (All versions < V2304.0)
5.4
Medium