Bubblesoftapps

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Bubblesoftapps records in CISA KEV

No Bubblesoftapps vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Bubbleupnp · all components

TI-2018-11060 CVE-2018-15506 · GHSA-rhh7-fxcj-gr67

MEDIUM 50

In BubbleUPnP 0.9 update 30, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04704 Published 2019-06-19 No fix listed CWE-611