PT-2021-7289 · Apache +1 · Apache Xmlbeans +1

🗓️ 14 Jan 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Apache XMLBeans up to 2.6.0 is vulnerable to XML entity expansion, risking denial of service.

Reporter	Title	Published	Views	Family All 73
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Spreadsheet Services is affected by security vulnerabilities	9 Aug 202116:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect embedded rules in IBM Business Automation Workflow	11 Jan 202413:32	–	ibm
IBM Security Bulletins	Security Bulletin:IBM TRIRIGA Application Platform discloses CVE-2021-23926	30 Aug 202216:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in open source libraries affects Tivoli Netcool/OMNIbus WebGUI	28 Jun 202104:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: Apache XML Beans Vulnerability Affects the B2B API of IBM Sterling B2B Integrator (CVE-2021-23926)	20 Oct 202118:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites affect IBM Jazz Foundation and IBM Engineering products.	16 Jul 202117:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities	22 Jun 202316:30	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability found in XMLBeans which hipped with IBM® Intelligent Operations Center (CVE-2021-23926)	8 Sep 202206:54	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in xmlbeans-2.6.0.jar used by IBM SPSS Collaboration and Deployment Service (CVE-2021-23926)	3 Mar 202516:41	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/GHSA-mw3r-pfmg-xp92
ubuntu	www.ubuntu.com/security/CVE-2021-23926
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-23926
bdu	www.bdu.fstec.ru/vul/2022-05231
security-tracker	www.security-tracker.debian.org/tracker/DLA-2693-1
security-tracker	www.security-tracker.debian.org/tracker/source-package/xmlbeans
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/682566
oracle	www.oracle.com/security-alerts/cpuoct2021.html
osv	www.osv.dev/vulnerability/SUSE-SU-2022:3876-1
cve	www.cve.org/CVERecord

06 Dec 2022 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 26.4 - 9.4

CVSS 3.19.1

EPSS0.00444

Apache XMLBeans XML entities denial of service version 2.6.0