Unscored CVE-2015-2346 EUVD-2015-2439GHSA-mx8c-vx98-66gq

XML external entity (XXE) vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022 allows remote authenticated users to read arbi…

Published May 18, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

XML external entity (XXE) vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022 allows remote authenticated users to read arbitrary files via the req parameter.

References

20150415 Huawei SEQ Analyst - XML External Entity Injection (XXE) mailing-list
http://packetstormsecurity.com/files/131459/Huawei-SEQ-Analyst-XXE-Injection.html