description: A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). An XML external entity injection vulnerability in the underlying XML parser could cause the affected application to disclose arbitrary files to remote attackers by loading a specially crafted xml file.
problem types: CWE-611: Improper Restriction of XML External Entity Reference
affected:
{
product: Solid Edge SE2021
vendor: Siemens
versions:
status: affected, version: All Versions < SE2021MP7
}