Lucene search
+L

1950 matches found

OSV
OSV
•added 2019/10/25 3:15 p.m.•11 views

CVE-2019-8082

Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Successful exploitation could lead to sensitive information disclosure...

7.5CVSS7.1AI score0.0319EPSS
SaveExploits0References1
NVD
NVD
•added 2019/10/25 3:15 p.m.•22 views

CVE-2019-8082

Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Successful exploitation could lead to sensitive information disclosure...

7.5CVSS7.7AI score0.0319EPSS
SaveExploits0References1
CVE
CVE
•added 2019/10/25 2:50 p.m.•61 views

CVE-2019-8082

CVE-2019-8082 affects Adobe Experience Manager 6.4, 6.3 and 6.2, which are vulnerable to XML External Entity (XXE) injection. Exploitation could lead to disclosure of sensitive information. Public details in connected sources reaffirm the affected versions and the impact. The linked advisory APSB...

7.5CVSS7.1AI score0.0319EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/10/25 2:50 p.m.•28 views

CVE-2019-8082

Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Successful exploitation could lead to sensitive information disclosure...

7.7AI score0.0319EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/10/16 12:00 a.m.•17 views

Adobe Experience Manager XML External Entity Injection Vulnerability (CNVD-2019-37123)

Adobe Experience Manager is an enterprise content management solution that helps you simplify the management and delivery of your content and assets. An XML external entity injection vulnerability exists in Adobe Experience Manager 6.2, 6.3, 6.4, and 6.5. An attacker can exploit this vulnerabilit...

7.5CVSS7.2AI score0.22541EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/10/16 12:00 a.m.•10 views

Adobe Experience Manager XML External Entity Injection Vulnerability (CNVD-2019-37122)

Adobe Experience Manager is an enterprise content management solution that helps you simplify the management and delivery of your content and assets. An XML external entity injection vulnerability exists in Adobe Experience Manager 6.0, 6.1, 6.2, 6.3, 6.4, 6.5. An attacker can exploit this...

7.5CVSS7.2AI score0.0319EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/10/15 12:00 a.m.•12 views

PT-2019-6108 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.2 through 6.5 Description: The issue is related to an xml external entity injection vulnerability. It is caused by incorrect restriction of XML external entities. Successful exploitation could lead to...

7.5CVSS6.8AI score0.22541EPSS
SaveExploits0References5
CNVD
CNVD
•added 2019/10/14 12:00 a.m.•6 views

XML Entity Injection Vulnerability in WebLogic

Oracle WebLogic is a Java EE application server. WebLogic suffers from an XML entity injection vulnerability that can be exploited by an attacker to obtain sensitive information...

7.2AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2019/10/03 7:03 p.m.•23 views

Security Bulletin: IBM Security Access Manager for Enterprise Single-Sign On is affected by an XML External Entity Injection (XXE) vulnerability (CVE-2019-4513)

Summary IBM Security Access Manager for Enterprise Single-Sign On has addressed the following vulnerability: XML External Entity Injection XXE attack when processing XML data. Vulnerability Details CVEID: CVE-2019-4513 DESCRIPTION: IBM Security Access Manager for Enterprise Single-Sign On is...

8.2CVSS1.1AI score0.02764EPSS
SaveExploits0Affected Software1
CNVD
CNVD
•added 2019/09/20 12:00 a.m.•4 views

XML Entity Injection Vulnerability in Kingdee Cloud K3 Cloud

Kingdee International Software Group Limited is a leading provider of enterprise management software and e-commerce application solutions in the Asia-Pacific region. An XML entity injection vulnerability exists in Kingdee Cloud K3 Cloud, which can be exploited by attackers to obtain sensitive...

7.2AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2019/08/30 7:48 a.m.•28 views

Security Bulletin: Multiple vulnerabilities in WebSphere Application Server affect IBM Business Process Manager (BPM), WebSphere Process Server (WPS) and WebSphere Lombardi Edition (WLE) (Java CPU April 2017)

Summary WebSphere Application Server is shipped as a component of IBM Business Process Manager, WebSphere Process Server, and WebSphere Lombardi Edition. WebSphere Application Server Liberty is shipped as a component of the optional BPM component Process Federation Server. Information about...

8.2CVSS0.6AI score0.03632EPSS
SaveExploits0Affected Software5
NVD
NVD
•added 2019/08/26 3:15 p.m.•26 views

CVE-2019-4513

IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 164555...

8.2CVSS8.1AI score0.02764EPSS
SaveExploits0References2
Prion
Prion
•added 2019/08/26 3:15 p.m.•25 views

Xxe

IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 164555...

6.4CVSS7.9AI score0.02764EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/08/26 2:40 p.m.•33 views

CVE-2019-4513

IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 164555...

8.2CVSS8AI score0.02764EPSS
SaveExploits0References2
CNVD
CNVD
•added 2019/08/22 12:00 a.m.•15 views

IBM Security Access Manager for Enterprise Single-Sign On XML External Entity Injection Vulnerability

IBM Security Access Manager for Enterprise Single-Sign On is a suite of authentication and authorization management solutions for enterprise single sign-on from IBM in the United States. An XML external entity injection vulnerability exists in IBM Security Access Manager for Enterprise Single-Sig...

8.2CVSS7.2AI score0.02764EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/08/21 12:00 a.m.•12 views

IBM Security Guardium Big Data Intelligence XML External Entity Injection Vulnerability

IBM Security Guardium Big Data Intelligence SonarG is a suite of big data security intelligence solutions from IBM, USA. The solution features interactive data exploration, automated connectivity analysis, and user activity analysis. An XML external entity injection vulnerability exists in IBM...

8.2CVSS6.9AI score0.02427EPSS
SaveExploits0References1
NVD
NVD
•added 2019/08/20 8:15 p.m.•41 views

CVE-2019-4424

IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, and 19.0.0.2 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force...

8.2CVSS7.5AI score0.02427EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/08/20 7:30 p.m.•41 views

CVE-2019-4424

IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, and 19.0.0.2 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force...

7.1CVSS8.1AI score0.02427EPSS
SaveExploits0References2
CVE
CVE
•added 2019/08/20 7:30 p.m.•71 views

CVE-2019-4424

CVE-2019-4424 is an XML External Entity (XXE) vulnerability affecting IBM Business Automation Workflow and IBM BPM. The IBM Security Bulletin lists affected products/versions: IBM Business Automation Workflow 18.0.0.0–18.0.0.2 and 19.0.0.1–19.0.0.2; IBM BPM up to several earlier CF fixes. The roo...

8.2CVSS7.9AI score0.02427EPSS
SaveExploits0References2Affected Software2
OSV
OSV
•added 2019/08/20 7:15 p.m.•11 views

CVE-2019-4433

IBM InfoSphere Global Name Management 5.0 and 6.0 and IBM InfoSphere Identity Insight 8.1 and 9.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

8.2CVSS7.1AI score0.03851EPSS
SaveExploits0References3
Rows per page
Query Builder