CVE-2018-12471

—

CVSS 3.0

8.1 high

EPSS

2%p73

Published

Oct 4, 2018 (Oct 4, 2018)

Modified

Jun 17, 2026

Description

A External Entity Reference ('XXE') vulnerability in SUSE Linux SMT allows remote attackers to read data from the server or cause DoS by referencing blocking elements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.

Vendors: suse
Products: subscription management tool
Weakness: CWE-611
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.