BW Calendar Engine

DATE	CVE	VULNERABILITY TITLE	RISK
2018-12-20	CVE-2018-1000836	XXE vulnerability in Apereo Bw-Calendar-Engine bw-calendar-engine version <= bw-calendar-engine-3.12.0 contains a XML External Entity (XXE) vulnerability in IscheduleClient XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. network apereo CWE-611	6.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.