Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2018-12-20	CVE-2018-1000836	XXE vulnerability in Apereo Bw-Calendar-Engine 3.12.0 bw-calendar-engine version <= bw-calendar-engine-3.12.0 contains a XML External Entity (XXE) vulnerability in IscheduleClient XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. network high complexity apereo CWE-611 critical	9.0

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.