CVE-2021-21470

SAP EPM Add-in for Microsoft Office, version - 1010 and SAP EPM Add-in for SAP Analysis Office, version - 2.8, allows an authenticated attacker with user privileges to parse malicious XML files which could result in XXE-based attacks in applications that accept attacker-controlled XML configurati...

Apache log4net XXE Vulnerability

Apache log4net is the United States Apache Apache Software Foundation, a logging output tool. A security vulnerability exists in the parsing of log4net configuration files in Apache log4net versions prior to 2.0.8. An attacker can exploit this vulnerability to force the system to accept arbitrary...

[SECURITY] [DSA 2202-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2202-1 [email protected] http://www.debian.org/security/ Stefan Fritsch March 23, 2011 http://www.debian.org/security/faq -...