ge mds-pulsenet CVE-2018-10613 is a vulnerability in GE Mds Pulsenet
Published on June 4, 2018

Multiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the host Windows platform in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior.

NVD

Weakness Type

What is a XXE Vulnerability?

The software processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

CVE-2018-10613 has been classified to as a XXE vulnerability or weakness.


Products Associated with CVE-2018-10613

Want to know whenever a new CVE is published for GE Mds Pulsenet? stack.watch will email you.

 

Affected Versions

GE MDS PulseNET and MDS PulseNET Enterprise Version Version 3.2.1 and prior is affected by CVE-2018-10613

Exploit Probability

EPSS
0.96%
Percentile
76.44%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.