Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2021-20492)

Summary IBM WebSphere Application Server is shipped as a component of Business Monitor. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixe...

CVE-2021-20492

IBM WebSphere Application Server 8.0, 8.5, 9.0, and Liberty Java Batch is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 197793...

Xxe

IBM WebSphere Application Server 8.0, 8.5, 9.0, and Liberty Java Batch is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 197793...

CVE-2021-20492

IBM WebSphere Application Server 8.0, 8.5, 9.0, and Liberty Java Batch is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 197793...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Intelligent Operations Center (CVE-2021-20492)

Summary IBM WebSphere® Application Server is shipped with IBM® Intelligent Operations Center. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

XML Entity Injection Vulnerability in oscshop2 Backend

oscshop2 is an open source free B2C mall system designed using thinkphp5, including micro-channel cell phone, follow the Apache2 open source agreement release. oscshop2 backend XML entity injection vulnerability exists . Attackers can use the vulnerability to obtain sensitive information...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Operations Analytics Predictive Insights (CVE-2021-20353

Summary Websphere Application Server WAS is shipped as a component of IBM Operations Analytics Predictive Insights. Information about WebSphere Application Server vulnerability CVE-2021-20353 to an XML External Entity Injection XXE which could result in a denial of service attack has been publish...

Chamilo XML External Entity Injection Vulnerability

Chamilo is a learning management system focused on ease of use and accessibility. Chamilo version 1.11.14 suffers from an XML external entity injection vulnerability. The vulnerability stems from reading XML data without disabling the ability to load external entities in admin/userimport.php, whi...

CVE-2021-22140

Elastic App Search versions after 7.11.0 and before 7.12.0 contain an XML External Entity Injection issue XXE in the App Search web crawler beta feature. Using this vector, an attacker whose website is being crawled by App Search could craft a malicious sitemap.xml to traverse the filesystem of t...

CVE-2021-22140

Elastic App Search versions after 7.11.0 and before 7.12.0 contain an XML External Entity Injection issue XXE in the App Search web crawler beta feature. Using this vector, an attacker whose website is being crawled by App Search could craft a malicious sitemap.xml to traverse the filesystem of t...

Chamilo 信息泄露漏洞

Chamilo is a learning management system focused on ease of use and accessibility. Chamilo version 1.11.14 suffers from an XML external entity injection vulnerability. The vulnerability stems from reading XML data without disabling the ability to load external entities in admin/userimport.php, whi...

CloudBees Jenkins Xcode Integration Plugin XML External Entity Injection Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . CloudBees Jenkins Xcode...

JetBrains IntelliJ IDEA External Entity Injection Vulnerability

JetBrains IntelliJ IDEA is a Czech company JetBrains set of integrated development environment for the Java language . An external entity injection vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2020.3.3. An attacker can exploit this vulnerability to obtain information...

IntelliJ IDEA 代码问题漏洞

JetBrains IntelliJ IDEA is a Czech company JetBrains set of integrated development environment for the Java language . An external entity injection vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2020.3.3. An attacker can exploit this vulnerability to obtain information...

XML Entity Injection Vulnerability in AmarALS Credit Risk Management System (CNVD-2021-35798)

AmarALS Credit Risk Management System is a "Credit Risk Management Support System" covering all aspects of credit risk management for commercial banks. An XML entity injection vulnerability exists in the AmarALS Credit Risk Management System, which could be exploited by an attacker to obtain...

XML Entity Injection Vulnerability in AmarALS Credit Risk Management System

AmarALS Credit Risk Management System is a "Credit Risk Management Support System" covering all aspects of credit risk management for commercial banks. An XML entity injection vulnerability exists in the AmarALS Credit Risk Management System, which could be exploited by an attacker to obtain...

CVE-2021-1530 Cisco BroadWorks Messaging Server XML External Entity Injection Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks Messaging Server Software could allow an authenticated, remote attacker to access sensitive information or cause a partial denial of service DoS condition on an affected system. This vulnerability is due to improper handlin...

Cisco BroadWorks Messaging Server XML External Entity Injection Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks Messaging Server Software could allow an authenticated, remote attacker to access sensitive information or cause a partial denial of service DoS condition on an affected system. This vulnerability is due to improper handlin...

CVE-2020-5013

CVE-2020-5013 affects IBM QRadar SIEM 7.3.x (7.3.0–7.3.3 Patch 7) and 7.4.x (7.4.0–7.4.2 Patch 2). The issue is an XML External Entity (XXE) injection when processing XML data, enabling a remote attacker to potentially disclose sensitive information or exhaust memory/CPU resources. Mitigations/Re...

Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Tivoli Federated Identity Manager

Summary IBM WebSphere Application Server is shipped with IBM Tivoli Federated Identity Manager. Information about security vulnerabilities affecting IBM WebSphere Application Server have been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...