Back to Database
Status published
Unknown
CVE-2023-46802
e-Tax software Version3.0.10 and earlier improperly restricts XML external entity...
Vulnerability Description
e-Tax software Version3.0.10 and earlier improperly restricts XML external entity references (XXE) due to the configuration of the embedded XML parser. By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-46802
Credits & Attribution
No credits recorded in the NVD database.
More from National Tax Agency
View All →CVE-2024-47045
Privilege chaining issue exists in the installer of e-Tax software(common...
Unknown
0
CVE-2020-5601
Chrome Extension for e-Tax Reception System Ver1.0.0.0 allows remote attackers...
High
8.8
CVE-2017-2226
Untrusted search path vulnerability in Setup file of advance preparation...
High
7.8
CVE-2017-2215
Untrusted search path vulnerability in Installer of "Setup file of...
High
7.8
CVE-2016-4901
Untrusted search path vulnerability in The installer of e-Tax Software...
High
7.8
Affected Vendor
National Tax Agency
View all reports →Affected Software
e-Tax software
Vulnerable Versions:
Version3.0.10 and earlier
Timeline
Official Publish:
November 6th, 2023
Last Modified:
October 29th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.