CVE-2025-24521 — Keysight Ixia Vision Product Family Improper Restriction of XML External Entity Reference
External XML entity injection allows arbitrary download of files. The score without least privilege principle violation is as calculated below. In combination with other issue…
Published: 2025-03-05 · CVSS: 6.9 · CVSS 4.0
External XML entity injection allows arbitrary download of files. The score without least privilege principle violation is as calculated below. In combination with other issues it may facilitate further compromise of the device. Remediation in Version 6.8.0, release date: 01-Mar-25.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7