AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2018-7837

HIGH · CVSS 7.5 EPSS 1.20%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-12-24 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2018-7837
Severity
HIGH
CVSS
7.5
EPSS
1.20%

Original Filing — NVD Description

An Improper Restriction of XML External Entity Reference ('XXE') vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow the software to resolve documents outside of the intended sphere of control, causing the software to embed incorrect documents into its output and expose restricted information.