VULNERABILITY INTELLIGENCE

CVE-2018-7837

CVSS score7.5 HIGH

EPSS probability1.20%

CISA KEVNot currently listed

Published2018-12-24

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

An Improper Restriction of XML External Entity Reference ('XXE') vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow the software to resolve documents outside of the intended sphere of control, causing the software to embed incorrect documents into its output and expose restricted information.

Weakness classification

CWE-611: Improper Restriction of XML External Entity Reference

Primary references

cybersecurity@se.com — Third Party Advisory
cybersecurity@se.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory