CVE-2010-2245

high · 7.4

XML External Entity (XXE) vulnerability in Apache Wink 1.1.1 and earlier allows remote attackers to read arbitrary files or cause a denial of service via a crafted XML document.

7.4

CVSS

11.6%

EPSS (exploit prob.)

96th

EPSS percentile

2017-08-08

Published

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H

Weaknesses

CWE-611

Affected products

Vendor	Product	Affected versions
apache	wink	<= 1.1.1

Check a specific version with /api/v1/cve/match.

References

http://marc.info/?l=wink-user&m=127843482925387&w=2
https://svn.apache.org/repos/asf/wink/trunk/security/CVE-2010-2245.pdf
http://marc.info/?l=wink-user&m=127843482925387&w=2
https://svn.apache.org/repos/asf/wink/trunk/security/CVE-2010-2245.pdf

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2010-2245