Improper input validation in Invensys Wonderware Win-Xml Exporter

CVE-2012-4710

Invensys Wonderware Win-XML Exporter 1522.148.0.0 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.021 (79.5th percentile) — read the EPSS interpretation.