Vulnerabilities

TI-2018-11266 CVE-2018-15805 · GHSA-489f-47v3-x4hm

Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity (XXE)…

MEDIUM 43

Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity (XXE) vulnerability, allowing an attacker to read arbitrary files or cause a denial of service (resource consumption).

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.0163 Published 2018-12-10 No fix listed CWE-611

TI-2018-11089 CVE-2018-15546 · GHSA-62gc-6222-r75f

Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting issue through a crafted PDF file.

LOW 28

Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting issue through a crafted PDF file.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00724 Published 2018-09-18 No fix listed CWE-79

Vulnerabilities

Filters

Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity (XXE)…

Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting issue through a crafted PDF file.