cvedb.io
CVE-2016-1343
CRITICAL · CVSS 10
EPSS exploitation probability: 0%
Published 2016-04-30T10:59:04.643 · Last modified 2026-06-17T00:41:44.970

Summary

The XML parser in Cisco Information Server (CIS) 6.2 allows remote attackers to read arbitrary files or cause a denial of service (CPU and memory consumption) via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCuy39059.

Affected products

cisco — information_server

Does this affect you?

Add your gear to cvedb and we'll alert you only when cisco ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.