CVE-2021-37178

No fix known EPSS <1%

A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). An XML external entity injection vulnerability in the underlying XML parser could cause the affected application to disclose arbitrary files to remote attackers by loading a specially crafted xml file.

Published 2021-08-10 · CVE record · OSV

Products: Siemens Solid Edge SE2021