Lucene search
+L

28 matches found

Circl
Circl
added 2023/05/12 12:15 a.m.5 views

CVE-2023-27554

creationtimestamp| type| source ---|---|--- 2023-05-12 00:15:42+00:00| seen| https://t.me/cibsecurity/63926...

9.1CVSS8.4AI score0.00859EPSS
SaveExploits0References1
CVE
CVE
added 2023/05/11 7:25 p.m.101 views

CVE-2023-27554

IBM WebSphere Application Server (traditional) versions 8.5 and 9.0 are affected by an XML External Entity (XXE) Injection vulnerability when processing XML data. A remote attacker could exploit this to expose sensitive information or exhaust memory resources. remediation centers on applying IBM ...

9.1CVSS7.6AI score0.00859EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/11 7:25 p.m.4 views

CVE-2023-27554 IBM WebSphere Application Server XML external entity injection

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 249185...

6.3CVSS6.4AI score0.00859EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2023/05/11 4:58 p.m.11 views

Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is vulnerable to an XML External Entity (XXE) Injection vulnerability (CVE-2023-27554)

Summary IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is vulnerable to an XML External Entity XXE Injection vulnerability CVE-2023-27554 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and...

9.1CVSS7.6AI score0.00859EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/05/11 4:57 p.m.33 views

Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM WebSphere Hybrid Edition, is vulnerable to an XML External Entity (XXE) Injection vulnerability (CVE-2023-27554)

Summary IBM WebSphere Application Server, which is bundled with IBM WebSphere Hybrid Edition, is vulnerable to an XML External Entity XXE Injection vulnerability CVE-2023-27554 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and...

9.1CVSS7.6AI score0.00859EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/05/11 4:24 p.m.21 views

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2023-27554)

Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities, Maximo Adapter for Primavera,...

9.1CVSS7.6AI score0.00859EPSS
SaveExploits0Affected Software11
Circl
Circl
added 2020/11/17 6:39 p.m.6 views

CVE-2020-27554

creationtimestamp| type| source ---|---|--- 2020-11-17 18:39:09+00:00| seen| https://t.me/cibsecurity/16446...

7.5CVSS7.4AI score0.00711EPSS
SaveExploits1References1
CVE
CVE
added 2020/11/17 2:21 p.m.44 views

CVE-2020-27554

CVE-2020-27554 affects BASETech GE-131 BT-1837836 firmware 20180921. The issue is cleartext transmission of sensitive information between the mobile app and the camera, exposing confidentiality. CVSS details in the connected NVD entry indicate network access with low attack complexity and no auth...

7.5CVSS7.3AI score0.00711EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder