CVE-2015-8698

3 documents3 sources

Severity

7.1HIGH

EPSS

0.3%

top 50.26%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Broadcom Release Automation

Timeline

PublishedJun 29

Latest updateMay 13

Description

CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allows remote attackers to read arbitrary files or cause a denial of service via a request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages1 packages

▶NVDbroadcom/release_automation5.0.2 — 5.0.2-227+3

🔴Vulnerability Details

GHSA

GHSA-q8cq-xq3c-pj7r: CA Release Automation (formerly LISA Release Automation) 5↗2022-05-13

▶

CVEList

CVE-2015-8698: CA Release Automation (formerly LISA Release Automation) 5↗2016-06-29

▶