CVE-2017-13706

—

CVSS 3.0

9.9 critical

EPSS

2%p79

Published

Oct 10, 2017 (Oct 10, 2017)

Modified

Jun 17, 2026

Description

XML external entity (XXE) vulnerability in the import package functionality of the deployment module in Lansweeper before 6.0.100.67 allows remote authenticated users to obtain sensitive information, cause a denial of service, conduct server-side request forgery (SSRF) attacks, conduct internal port scans, or have unspecified other impact via an XML request, aka bug #572705.

Vendors: lansweeper
Products: lansweeper
Weakness: CWE-611
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news0 stories

No ingested article mentions this CVE yet.