Misinterpretation of malicious XML input

🗓️ 03 Aug 2021 16:57:27Reported by AnonymousType

Misinterpretation of malicious XML input. Impact on xmldom versions 0.6.0. Patches to update to 0.7.0. Workaround for downstream applications. Contact info for more details and recommendation to upgrade

Reporter	Title	Published	Views	Family All 25
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses xmldom-0.8.10.tgz which is vulnerable to this CVE-2021-32796	9 Oct 202514:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to Improper Encoding or Escaping of Output due to xmldom ( CVE-2021-32796 )	22 Aug 202507:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found with third-party libraries used by IBM® MobileFirst Platform	17 Feb 202315:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Product Hub is affected by several vulnerabilities	29 Aug 202518:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	6 Aug 202516:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Control is vulnerable to weakness related to xmldom (CVE-2021-32796)	28 Nov 202505:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities	11 Jan 202221:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in xmldom-0.9.8.tgz	27 Aug 202502:50	–	ibm
Circl	CVE-2021-32796	28 Jul 202102:12	–	circl
CNNVD	xmldom 安全漏洞	27 Jul 202100:00	–	cnnvd

Vulners

Node

xmldom xmldomRange<0.7.0