CVE-2023-37364

published 2023-08-03

CVE-2023-37364: In WS-Inc J WBEM Server 4.7.4 before 4.7.5, the CIM-XML protocol adapter does not disable entity resolution. This allows context-dependent attackers to read…

Priority P3 44 critical 9.1 CVSS 3.1

AV N AC L PR N UI N S U C H I N A H

In WS-Inc J WBEM Server 4.7.4 before 4.7.5, the CIM-XML protocol adapter does not disable entity resolution. This allows context-dependent attackers to read arbitrary files or cause a denial of service, a similar issue to CVE-2013-4152.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
ws-inc	j_wbem	>= 4.0.0 < 4.7.5	4.7.5

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-611