Description
External XML entity injection allows arbitrary download of files. The
score without least privilege principle violation is as calculated
below. In combination with other issues it may facilitate further
compromise of the device. Remediation in Version 6.8.0, release date:
01-Mar-25.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Keysight | Ixia Vision Product Family | 6.3.1 | — |
Advisories 1
- ICSA-25-063-02 Keysight Ixia Vision Product Family (Update A) CISA ICS & IT advisories · Sep 30, 2025