Sdl

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Sdl records in CISA KEV

No Sdl vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Web Content Manager · all components

TI-2018-13726 CVE-2018-19371 · GHSA-42gh-7xp2-q72c

LOW 38

The SaveUserSettings service in Content Manager in SDL Web 8.5.0 has an XXE Vulnerability that allows reading sensitive files from the system.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.06017 Published 2019-01-02 No fix listed CWE-611