CVE-2018-15805

CRITICAL 9.1CVE-2018-15805 · Published 10/12/2018 · updated 17/06/2026

In short

CVE-2018-15805 is a CRITICAL (CVSS 9.1) vulnerability affecting prizmdoc (accusoft).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 76.2% of all vulnerabilities.
Fix: update to 13.5 or later.

Package	Affected versions	Patched versions
prizmdoc accusoft	`< 13.5`	`13.5`

Description

Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity (XXE) vulnerability, allowing an attacker to read arbitrary files or cause a denial of service (resource consumption).

References

help.accusoft.com/PrizmDoc/v13.5/HTML/webframe.html · Release Notes
medium.com/%40mrnikhilsri/oob-xxe-in-prizmdoc-cve-2018-15805-dfb1e474345c

More vulnerabilities in prizmdoc

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free