CVE-2018-17912

HIGH

CASE Suite < 3.10 - XML External Entity Injection via Parameter Entity Processing

Title source: llm

An XXE vulnerability exists in CASE Suite Versions 3.10 and prior when processing parameter entities, which may allow remote file disclosure.

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

Third Party Advisory, US Government Resource x_refsource_misc

CVSS v3 7.5

EPSS 0.0165

EPSS Percentile 73.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-611

Status published

Products (1)

sauter-controls/case_suite < 3.10

Published Nov 02, 2018

Tracked Since Feb 18, 2026