5.9
Moyenne
CVE-2025-6438 A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause manipulation of…
Description
A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause manipulation of SOAP API calls and XML external entities injection resulting in unauthorized file access when the server is accessed via the network using an application account.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| EcoStruxure™ IT Data Center Expert 8.3 | 8.3 → dernières | Pas de correctif indiqué |
Autres CVE de EcoStruxure™ IT Data Center Expert
Les 7 CVE de EcoStruxure™ IT Data Center Expert →
CVE-2026-8045
CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information…
7.1
Élevée
CVE-2025-50124
A CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation when the server is…
7.2
Élevée
CVE-2025-50125
A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthenticated remote code…
6.3
Moyenne
CVE-2025-50123
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote command…
7.2
Élevée