Required CVE Record Information
Description
Dell Unity prior to 5.3 contains an XML External Entity injection vulnerability. An XXE attack could potentially exploit this vulnerability disclosing local files in the file system.
CVSS 1 Total
Score | Severity | Version | Vector String |
---|---|---|---|
4.9 | MEDIUM | 3.1 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H |
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.