What’s Vulnerable › Vulnerabilities
CVE-2018-12471: External Entity processing in the RegistrationSharing module
- Severity: high (CVSS 8.1 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2018-10-04 · updated 2026-06-17
- Weakness: CWE-611
Description
A External Entity Reference ('XXE') vulnerability in SUSE Linux SMT allows remote attackers to read data from the server or cause DoS by referencing blocking elements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.
Affected products
- SUSE Subscription Management Tool: before 3.0.37 — fixed in 3.0.37
How to fix
Upgrade to a fixed version: SUSE Subscription Management Tool 3.0.37. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2018-12471 or the next vulnerability affects your stack