{"id":"CVE-2018-12585","details":"An XXE vulnerability in the OPC UA Java and .NET Legacy Stack can allow remote attackers to trigger a denial of service.","modified":"2026-08-27T03:47:59.122562076Z","published":"2018-09-14T21:29:03.693Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"last_affected":"1.3.343"}],"source":"CPE_RANGE","vendor_product":"opcfoundation:ua-java","cpes":["cpe:2.3:a:opcfoundation:ua-java:*:*:*:*:*:*:*:*"]}]},"references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/105538"},{"type":"ADVISORY","url":"https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12585.pdf"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/OPCF-Members/UA-.NET-Legacy","events":[{"introduced":"0"},{"last_affected":"4011cb43d40b9b3259b25a223a9923da38ea7ea1"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"last_affected":"1.03.342"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:opcfoundation:ua-.net-legacy:*:*:*:*:*:*:*:*"}}],"versions":["1.03.342","1.03.341","1.03.340","1.02.336"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-12585.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"}]}