CVE-2018-11640

PoC —

CVSS 3.0

9.1 critical

EPSS

2%p78

Published

Jul 3, 2018 (Jul 3, 2018)

Modified

Jun 17, 2026

Description

XML External Entity (XXE) vulnerability in the web service in Dialogic PowerMedia XMS before 3.5 SU2 allows remote attackers to read arbitrary files or cause a denial of service (resource consumption).

Vendors: dialogic
Products: powermedia xms
Weakness: CWE-611
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news0 stories

No ingested article mentions this CVE yet.