Vulnerabilities

TI-2023-01215 CVE-2023-1288 · GHSA-j343-8c44-p9w7

ENOVIA Live Collaboration V6R2013xE is affected by an XML External Entity injection (XXE) vulnerability

LOW 33

An XML External Entity injection (XXE) vulnerability in ENOVIA Live Collaboration V6R2013xE allows an attacker to read local files on the server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00507 Published 2023-03-09 No fix listed CWE-611

TI-2023-01214 CVE-2023-1287 · GHSA-2pf4-w9v8-c8g6

MEDIUM 51

An XSL template vulnerability in ENOVIA Live Collaboration V6R2013xE allows Remote Code Execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00954 Published 2023-03-09 No fix listed CWE-74