VULNERABILITY INTELLIGENCE

CVE-2023-37497

CVSS score8.1 HIGH
EPSS probability0.53%
CISA KEVNot currently listed
Published2023-08-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The Unica application exposes an API which accepts arbitrary XML input. By manipulating the given XML, an authenticated attacker with certain rights can successfully perform XML External Entity attacks (XXE) against the backend service.

Weakness classification

  • nvd@nist.gov: CWE-611

Primary references