The defect-week session of the fourth term: XML external entity injection-vulnerability warning-the black bar safety net

🗓️ 11 Oct 2018 00:00:00Reported by 佚名Type

myhack58

myhack58🔗 www.myhack58.com👁 530 Views

The defect-week session on XML external entity injection vulnerability and its impact on securit

Reporter	Title	Published	Views	Family All 41
IBM Security Bulletins	Security Bulletin: IBM Content Navigator is affected by an XML External Entity Injection (XXE) vulnerability	17 Jun 201812:19	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability in FileNet Content Management Interoperability Services (CMIS) might affect IBM Business Automation Workflow and IBM Business Process Manager (BPM) (CVE-2018-1364)	14 Sep 202215:02	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in FileNet Content Management Interoperability Services (CMIS) shipped with IBM Case Manager (CVE-2018-1364)	4 Sep 201822:20	–	ibm
IBM Security Bulletins	Security Bulletin: FileNet Content Management Interoperability Services (CMIS), which ships with IBM Content navigator, is affected by the ability to parse untrusted XML input containing a reference to an external entity	10 Jul 201800:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Netcool/OMNIbus Probe DSL Factory Framework is affected by Apache Camel's Core vulnerability	9 Oct 201809:00	–	ibm
CNVD	IBM Content Navigator XML External Entity Injection Vulnerability	30 Jan 201800:00	–	cnvd
CNVD	Apache Camel Core XSD validation processor external entity information disclosure vulnerability	2 Aug 201800:00	–	cnvd
CVE	CVE-2018-1000548	26 Jun 201816:00	–	cve
CVE	CVE-2018-13439	8 Jul 201815:00	–	cve
CVE	CVE-2018-1364	29 Jan 201816:00	–	cve

11 Oct 2018 00:00Current

0.2Low risk

Vulners AI Score0.2

EPSS0.02526

xml external entity injection xxe vulnerability code audit cwe-611 owasp apache camel wechat pay umlet ibm content navigator