CVE-2023-37364

CRITICAL · CVSS 9.1 EPSS 0.54%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-08-03 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2023-37364

Severity

CRITICAL

CVSS

9.1

EPSS

0.54%

Original NVD Description

In WS-Inc J WBEM Server 4.7.4 before 4.7.5, the CIM-XML protocol adapter does not disable entity resolution. This allows context-dependent attackers to read arbitrary files or cause a denial of service, a similar issue to CVE-2013-4152.