CVE-2017-17762
40Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 2.5%
from disclosure to weapon
Published on NVDAug 29
VulnCheck+2695d
exploitation probability
2.5%top 17% of all CVEs
observed exploitation
yesVulnCheck
XML external entity (XXE) vulnerability in Episerver 7 patch 4 and earlier allows remote attackers to read arbitrary files via a crafted DTD in an XML request involving util/xmlrpc/Handler.ashx.
Affected products
n/a · n/a