Unscored severity · published Mar 6, 2013
CVE-2013-1140
The XML parser in Cisco Security Monitoring, Analysis, and Response System (MARS) allows remote attackers to read arbitrary files via an external entity declaration in conjunction…
–
CVSS
1.2%
EPSS
No
On KEV
Description
The XML parser in Cisco Security Monitoring, Analysis, and Response System (MARS) allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCue55093.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SM
Security Monitoring Analysis And Response System · Cisco
All versions, or not specified · source: NVD
Affected product
SM
Security Monitoring Analysis And Response System
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1140
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1140
tools.cisco.com
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1140
More from Security Monitoring Analysis And Response System
–
CVE-2013-5563
Cross-site scripting (XSS) vulnerability in Query/NewQueryResult.jsp in Cisco Security Monitoring, Analysis and Response System (CS-MARS) allows remote attackers to inject…
–
CVE-2007-0397
The Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.3 and Adaptive Security Device Manager (ASDM) before 5.2(2.54) do not validate the SSL/TLS…
–
CVE-2006-3733
jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1,…