CVE-2016-1343

critical Cisco
CVSS v3 Base Score
10.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H
EPSS Score
0.6%
Exploitation probability in 30 days
Top 31% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Confidentiality
High
Integrity
None
Availability
High
Published: April 30, 2016 (3666 days ago)
Last Modified: May 6, 2026
Vendor: Cisco
Source: NVD

Description

The XML parser in Cisco Information Server (CIS) 6.2 allows remote attackers to read arbitrary files or cause a denial of service (CPU and memory consumption) via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCuy39059.

CWE

NVD-CWE-Other

Affected Products

cisco information server

References

🔗 tools.cisco.com 🔗 tools.cisco.com