GCVE-110-CERTCC-2016-279472

Advisory PublishedCVSS 4.3/10

Vulnetix · Advisory published March 24, 2016

Granite Data Services version 3.1.1-SNAPSHOT AMF framework is vulnerable to XML external entity (XXE) attack that may be leveraged to expose sensitive data on the host..

Download JSON Open in Console

Risk Scores

CVSS 2.0

4.3/10

Medium · AV:L/AC:L/Au:S/C:P/I:P/A:P

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact1d1_population2d1_direct_report1

certcc-cvss-temporal-env

temporal_score3.5remediation_levelNDreport_confidenceUCenvironmental_score1.35381383420531target_distributionLenvironmental_vectorCDP:LM/TD:L/CR:M/IR:M/AR:M

Aliases

CVE-2016-2340

References

Granite Data Services AMF framework fails to properly parse XML input containing a reference to external entities

url

Granite Data Services AMF framework fails to properly parse XML input containing a reference to external entities

url

Granite Data Services AMF framework fails to properly parse XML input containing a reference to external entities

advisory

Browse GCVE Records

73,040 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON