Obdasystems

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Obdasystems records in CISA KEV

No Obdasystems vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Mastro · all components

TI-2021-17555 CVE-2021-40510 · GHSA-9vf5-wqh5-qmx4

LOW 36

XML eXternal Entity (XXE) in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01358 Published 2022-06-21 No fix listed CWE-611

TI-2021-17556 CVE-2021-40511 · GHSA-cv78-jp3v-7557

LOW 35

OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion (aka “billion laughs”) attack allowing denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00943 Published 2022-06-21 No fix listed CWE-776