Vulnerabilities > CVE-2018-10613 - XXE vulnerability in GE MDS Pulsenet
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
Multiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the host Windows platform in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |