CVE-2017-13706

XML external entity (XXE) vulnerability in the import package functionality of the deployment module in Lansweeper before 6.0.100.67 allows remote authenticated users to obtain sensitive information, cause a denial of service, conduct server-side request forgery (SSRF) attacks, conduct internal port scans, or have unspecified other impact via an XML request, aka bug #572705.

• CWE-611

• http://packetstormsecurity.com/files/144527/Lansweeper-6.0.100.29-XXE-Injection.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2017/Oct/14Mailing List, Third Party Advisory
• https://www.lansweeper.com/changelog.aspxRelease Notes, Vendor Advisory
• http://packetstormsecurity.com/files/144527/Lansweeper-6.0.100.29-XXE-Injection.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2017/Oct/14Mailing List, Third Party Advisory
• https://www.lansweeper.com/changelog.aspxRelease Notes, Vendor Advisory

Published

Oct 10, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1370IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could disclose …
• CVE-2017-13700An issue was discovered on MOXA EDS-G512E 5.1 build 16072215…
• CVE-2017-13701An issue was discovered on MOXA EDS-G512E 5.1 build 16072215…
• CVE-2017-13702An issue was discovered on MOXA EDS-G512E 5.1 build 16072215…
• CVE-2017-13703An issue was discovered on MOXA EDS-G512E 5.1 build 16072215…
• CVE-2017-13704In dnsmasq before 2.78, if the DNS packet size does not matc…
• CVE-2017-13707Privilege escalation in Replibit Backup Manager earlier than…9.8
• CVE-2017-13708Buffer overflow in the web server service in VX Search Enter…
• CVE-2017-13709In FlightGear before version 2017.3.1, Main/logger.cxx in th…
• CVE-2017-1371Builder tools running in the IBM TRIRIGA Application Platfor…
• CVE-2017-13710The setup_group function in elf.c in the Binary File Descrip…
• CVE-2017-13711Use-after-free vulnerability in the sofree function in slirp…7.5