high7.5
CVE-2019-14258
The XML-RPC subsystem in Zenoss 2.5.3 allows XXE attacks that lead to unauthenticated information disclosure via port 9988.
Impact
The XML-RPC subsystem in Zenoss 2.5.3 allows XXE attacks that lead to unauthenticated information disclosure via port 9988.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zenoss | Zenoss | Version 2.5.3 |