CVE-2017-10670
CriticalSummary
An XML External Entity (XXE) issue exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET), exploitable by sending a crafted standard-conforming OSCI message from within the infrastructure.
Risk Assessment
Exploitation of this vulnerability may lead to the disclosure of sensitive data or attacks on the organization's infrastructure. There is a risk that an attacker could gain access to internal system resources.
Recommendation
It is recommended to upgrade to the latest version of OSCI Transport Library and implement appropriate security measures to minimize the risk associated with XXE.
Original NVD description (English source)
An XML External Entity (XXE) issue exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET), exploitable by sending a crafted standard-conforming OSCI message from within the infrastructure.