Skip to content
OpenAdvisories
Critical · 9.4 CVE-2018-3881 EUVD-2018-15667GHSA-p7jf-prfr-4v7q

An exploitable unauthenticated XML external injection vulnerability was identified in FocalScope v2416. A unauthenticated attacker could su…

Published Aug 1, 2018 · Updated Sep 16, 2024 · Assigned by talos

Description

An exploitable unauthenticated XML external injection vulnerability was identified in FocalScope v2416. A unauthenticated attacker could submit a specially crafted web request to FocalScope's server that could cause an XXE, and potentially result in data compromise.

Affected products

VendorProductAffectedFixed
FocalScope Focalscope v2416 —

References