CVEvulnerability

CVE-2016-1343

10.0 CRITICAL Published 2016-04-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-04-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
10.0 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:P

Description

The XML parser in Cisco Information Server (CIS) 6.2 allows remote attackers to read arbitrary files or cause a denial of service (CPU and memory consumption) via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCuy39059.

Affected configurations

• cisco information server 6.2 base

References