CVE-2018-5758

6.5 mediumEPSS 3.0%

Medium (6.5) in aurea jive-n. EPSS 3.0% chance of exploitation in the next 30 days.

The Upload File functionality in upload.jspa in Aurea Jive Jive-n 9.0.2.1 On-Premises allows for an XML External Entity attack through a crafted file, allowing attackers to read arbitrary files.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2018-03-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

aurea:jive-n

References

https://rhinosecuritylabs.com/research/xml-external-entity-injection-xxe-cve-2018-5758/
https://rhinosecuritylabs.com/research/xml-external-entity-injection-xxe-cve-2018-5758/

Check your stack JSON