Vulnerabilities > CVE-2021-35066 - XXE vulnerability in Connectwise Automate

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
connectwise
CWE-611
critical
NVD
Published: 2021-06-21
Updated: 2021-06-28

Summary

An XXE vulnerability exists in ConnectWise Automate before 2021.0.6.132.

Vulnerable Configurations

Part Description Count
Application
Connectwise
5

Common Weakness Enumeration (CWE)

References