CVE-2018-1183

CVE-2018-1183 describes an XML External Entity (XXE) injection vulnerability affecting numerous Dell EMC products, including Unisphere for VMAX, Solutions Enabler, VASA Provider, SMIS, VMAX eManagement, VNX, VNXe, ViPR SRM, XtremIO, VMAX eNAS, and Unity Operating Environment. The vulnerability stems from the XML parser's configuration, allowing attackers to process malicious XML input containing external entity references. This critical vulnerability (CVSS 9.8) has a network attack vector and low attack complexity, potentially leading to unauthorized access to sensitive files or denial-of-service. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.