Vulnerabilities > CVE-2021-35066 - XXE vulnerability in Connectwise Automate

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
connectwise
CWE-611
NVD
Published: 2021-06-21
Updated: 2021-06-28

Summary

An XXE vulnerability exists in ConnectWise Automate before 2021.0.6.132.

Vulnerable Configurations

Part Description Count
Application
Connectwise
5

Common Weakness Enumeration (CWE)

References