description: WebAccess/NMS (versions prior to 3.0.2) does not sanitize XML input. Specially crafted XML input could allow an attacker to read sensitive files.
problem types: IMPROPER RESTRICTION OF XML EXTERNAL ENTITY REFERENCE CWE-611
affected:
{
product: WebAccess/NMS
vendor: n/a
versions:
status: affected, version: Versions prior to 3.0.2
}