CVE-2021-42537 — VISAM VBASE Editor Improper Restriction of XML

CVE-2021-42537

VISAM VBASE Editor Improper Restriction of XML PUBLISHED

Description (CNA)

VISAM VBASE version 11.6.0.6 processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

Affected (CNA)

Vendor / product	Versions
VISAM / VBASE Pro-RT/ Server-RT (Web Remote)	affected version 11.6.0.6

CWE

No CWE identifiers supplied.

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-308-01

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-21-308-01

CISA-ADP

No English description supplied.

No references supplied.