CVE-2016-5795 - CVE House
Back to Database
Status published High CVE-2016-5795

An XXE issue was discovered in Automated Logic Corporation (ALC)...

Vulnerability Description

An XXE issue was discovered in Automated Logic Corporation (ALC) Liebert SiteScan Web Version 6.5 and prior, ALC WebCTRL Version 6.5 and prior, and Carrier i-Vu Version 6.5 and prior. An attacker could enter malicious input to WebCTRL, i-Vu, or SiteScan Web through a weakly configured XML parser causing the application to execute arbitrary code or disclose file contents from a server or connected network.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-5795

Credits & Attribution

No credits recorded in the NVD database.

References

More from automatedlogic

View All →
CVE-2021-31682
The login portal for the Automated Logic WebCTRL/WebCTRL OEM web...
Medium 6.1

Affected Vendor

automatedlogic

View all reports →

Affected Software

i-vu, sitescan web, automatedlogic webctrl
Vulnerable Versions:
0

Timeline

Official Publish: August 31st, 2017
Last Modified: August 6th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.