CVE-2018-13103

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

OX App Suite 7.8.4 and earlier allows SSRF.

Metrics

CVSS 3.0 5.4/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-918

Affected software

No affected versions have been published.

Timeline

Published
Mar 21, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-131045.4OX App Suite 7.8.4 and earlier allows XSS. Internal reference: 58742 (Bug ID)CVE-2018-131064.8ClipperCMS 1.3.3 has stored XSS via the "Tools -> Configuration" screen of the manager/ URI.CVE-2018-131087.8All ADB broadband gateways / routers based on the Epicentro platform are affected by a local root jailbreak vulnerability where attackers arCVE-2018-131097.5All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers aCVE-2018-13118.1The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has CVE-2018-131107.5All ADB broadband gateways / routers based on the Epicentro platform are affected by a privilege escalation vulnerability where attackers caCVE-2018-131115.9There exists a partial Denial of Service vulnerability in Wanscam HW0021 IP Cameras. An attacker could craft a malicious POST request to craCVE-2018-131127.5get_l2len in common/get.c in Tcpreplay 4.3.0 beta1 allows remote attackers to cause a denial of service (heap-based buffer over-read and appCVE-2018-131137.5The transfer and transferFrom functions of a smart contract implementation for Easy Trading Token (ETT), an Ethereum token, have an integer CVE-2018-131149.8Missing authentication and improper input validation in KERUI Wifi Endoscope Camera (YPC99) allow an attacker to execute arbitrary commands CVE-2018-131156.5Lack of an authentication mechanism in KERUI Wifi Endoscope Camera (YPC99) allows an attacker to watch or block the camera stream. The RTSP CVE-2018-131169.8/user/del.php in zzcms 8.3 allows SQL injection via the tablename parameter after leveraging use of the zzcms_ask table.
CVE-2018-13103: Medium severity, CVSS 5.4 | Vulnix