CVE-2018-12471

8.1 highEPSS 1.5%

High (8.1) in suse subscription management tool. EPSS 1.5% chance of exploitation in the next 30 days.

A External Entity Reference ('XXE') vulnerability in SUSE Linux SMT allows remote attackers to read data from the server or cause DoS by referencing blocking elements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.

Severity

CVSS 3.0

8.1 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2018-10-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

suse:subscription_management_tool

References

https://bugzilla.suse.com/show_bug.cgi?id=1103809
https://bugzilla.suse.com/show_bug.cgi?id=1103809

Check your stack JSON