Description
XML parsers process attacker-influenced update manifests or network responses with external entity resolution enabled, potentially allowing XML External Entity (XXE) attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CompuGroup Medical | Infantia | ≤ 6.01.1 | — |
| CompuGroup Medical | Profim | ≤ 6.01.1 | — |
| CompuGroup Medical | Phronesis | ≤ 4.51.0 | — |
| CompuGroup Medical | Venere | ≤ 8.33.2 | — |