What’s Vulnerable › Vulnerabilities

CVE-2018-15362

• Severity: critical (CVSS 9.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-12-07 · updated 2026-06-17
• Weakness: CWE-611

Description

XXE in GE Proficy Cimplicity GDS versions 9.0 R2, 9.5, 10.0

Affected products

• GE CIMPLICITY: 9.0_r2, 9.5, 10.0

References

• http://www.securityfocus.com/bid/106133
• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/07/klcert-18-025-general-electric-proficy-gds-xml-external-entity-xxe/
• https://ics-cert.us-cert.gov/advisories/ICSA-18-340-01
• http://www.securityfocus.com/bid/106133
• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/07/klcert-18-025-general-electric-proficy-gds-xml-external-entity-xxe/
• https://ics-cert.us-cert.gov/advisories/ICSA-18-340-01

Get alerted when CVE-2018-15362 or the next vulnerability affects your stack