Vulnetix
Try Vulnetix Request Demo
CVE-2013-1915 PUBLISHED CVSS 7.5 HIGH

ModSecurity before 2.7.3 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) vulnerability.

EPSS 4.85% · 89.5th percentile

Risk Scores

CVSS v2.0
7.5
EPSS Score
4.85%
89.5th percentile

Affected Products

VendorProductVersions
trustwavemodsecurity0
opensuseopensuse11.4, 12.2, 12.3
debiandebian_linux6.0, 7.0
n/an/an/a
fedoraprojectfedora19, 18, 17

Timeline

References

Open in Interactive Console →