Oracle WebLogic wls_utc wsdl service suffers from an xml entity injection vulnerability.

WebLogic is the United States Oracle Corporation produced a middleware based on the JAVAEE architecture , is used to develop , integrate , deploy and manage large-scale distributed Web applications , network applications and database applications of Java application servers . An xml entity...

Microsoft Enterprise Mode Site List Manager XML External Entity Injection Vulnerability

The Microsoft Enterprise Mode Site List Manager Enterprise Mode Site List Manager tool allows IT professionals to create and update Enterprise Mode Site Lists for their companies without the need to directly edit XML. Microsoft Enterprise Mode Site List Manager XML External Entity Injection...

Microsoft Enhanced Mitigation Experience Toolkit (EMET) XML External Entity Injection Vulnerability

Microsoft Enhanced Mitigation Experience Toolkit is a security tool introduced in response to vulnerabilities. It protects users from attacks even when patches are not installed through technologies such as Data Execution Protection DEP, Structured Exception Handling Override Protection SEHOP, an...

Microsoft Enterprise Mode Site List Manager - XML External Entity Injection

Microsoft Enterprise Mode Site List Manager - XML External Entity Injection + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-ENTERPRISE-MODE-SITE-LIST-MANAGER-XXE.txt + ISR: Apparition Security Greetz:...

Fortify Software Security Center (SSC) 17.x/18.1 - XML External Entity Injection

Details ================ Software: Fortify SSC Software Security Center Version: 17.10, 17.20 & 18.10 Homepage: https://www.microfocus.com Advisory report: https://github.com/alt3kx/CVE-2018-12463 CVE: CVE-2018-12463 at https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12463 CVSS: HIGH...

Microsoft Enterprise Mode Site List Manager - XML External Entity Injection

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-ENTERPRISE-MODE-SITE-LIST-MANAGER-XXE.txt + ISR: Apparition Security Greetz: indoushka | Eduardo Vendor ============= www.microsoft Product ===========...

Dell EMC XML External Entity Injection Vulnerability

Dell EMC Unisphere for VMAX Virtual Appliance, etc. are products of Dell Inc. in the U.S. Dell EMC Unisphere for VMAX Virtual Appliance vApp is a management tool for VMAX storage arrays.EMC Solutions Enabler Virtual Appliance is a solutions application virtual appliance. An XML external entity...

CVE-2018-1542

IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform Engine ACCE 5.2.1 and 5.5.0 are vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose...

ventrian News-ArticlesXML External Entity Injection Vulnerability

ventrian News-Articles is a backend system for publishing and managing news. An XML external entity injection vulnerability exists in the News-Articles/API/MetaWebLog/Handler.ashx.vb file in ventrian News-Articles version 00.09.11. An attacker can use this vulnerability to read arbitrary files on...

TIBCO Administrator - Enterprise Edition TIBCO Administrator server component external entity injection vulnerability

TIBCO Administrator is an application for deploying TIBCO products from TIBCO Software, USA. The program supports deploying TIBCO products, managing users, monitoring hosts, etc. TIBCO Administrator-Enterprise Edition is its enterprise edition.TIBCO Administrator server is one of the management...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Flex System Manager (FSM)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 1.6 and 1.7 that is used by FSM. These issues were disclosed as part of the IBM Java SDK updates in April 2017. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2017-3539 DESCRIPTIO...

Security Bulletin: Multiple vulnerabilities in libxml2 affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in libxml2. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-1819 DESCRIPTION: Libxml is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error in the xmlreader when processing XML...

Security Bulletin: Multiple security vulnerabilities in IBM Business Process Manager affect IBM Cloud Orchestrator (CVE-2015-7407, CVE-2015-7400, CVE-2015-7454)

Summary IBM Business Process Manager that is bundled with IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise Edition, has identified multiple vulnerabilites. IBM Cloud Orchestrator V2.4, has addressed these vulnerabilites . It includes IBM Business Process Manager V8.5.6 CF2...

Security Bulletin: Multiple Vulnerabilities in libxml, OpenSSH, Firefox affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance (CVE-2015-1819, CVE-2015-5600, CVE-2015-7183, CVE-2015-7181, CVE-2015-7182)

Summary Multiple Vulnerabilities in libxml, OpenSSH, Firefox affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance. Vulnerability Details CVEID: CVE-2015-1819 DESCRIPTION: Libxml is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error in the...

Security Bulletin: Vulnerabilities in tomcat affect IBM SmartCloud Provisioning 2.1 for Software Virtual Appliance (CVE-2013-4590, CVE-2014-0119)

Summary Vulnerabilities in tomcat6 packages affect IBM SmartCloud Provisioning 2.1 for Provided Software Virtual Appliance CVE-2013-4590, CVE-2014-0119. Vulnerability Details CVEID: CVE-2013-4590 DESCRIPTION: Apache Tomcat could allow a remote attacker to obtain sensitive information, caused by a...

Security Bulletin: Vulnerability in Apache POI affects IBM Maximo Asset Management (CVE-2017-12626)

Summary Apache POI used by IBM Maximo Asset Management is vulnerable to a denial of service, cause by an XML External Entity Injection XXE error when processing XML data. By using a specially-crafted OOXML file, a remote attacker could exploit this vulnerability to consume all available CPU...

Security Bulletin: IBM Tivoli Netcool Impact is affected by multiple vulnerabilities in IBM Tivoli Integrated Portal (TIP)

Summary IBM Tivoli Netcool Impact has addressed the following vulnerabilities in IBM Tivoli Integrated Portal TIP . Vulnerability Details CVEID: CVE-2015-5254 DESCRIPTION: Apache ActiveMQ could allow a remote attacker to execute arbitrary code on the system, caused by the failure to restrict the...

Security Bulletin: IBM Tivoli Netcool Impact is affected by an Open Source Apache Poi vulnerability (CVE-2017-5644)

Summary IBM Tivoli Netcool Impact has addressed the following vulnerability Open Source Apache Poi vulnerability CVE-2017-5644. Vulnerability Details CVEID: CVE-2017-5644 DESCRIPTION: Apache POI is vulnerable to a denial of service, cause by an XML External Entity Injection XXE error when...

Security Bulletin: Vulnerability in Apache POI affects IBM Maximo Asset Management (CVE-2017-5644)

Summary Apache POI used by IBM Maximo Asset Management is vulnerable to a denial of service, cause by an XML External Entity Injection XXE error when processing XML data. By using a specially-crafted OOXML file, a remote attacker could exploit this vulnerability to consume all available CPU...

Security Bulletin: IBM Tivoli Common Reporting (TCR) 2017Q2 Security Updater: TCR, a part of IBM Jazz for Service Management (JazzSM) is affected by multiple vulnerabilities

Summary Fixes of Cognos Business Intelligence are provided as part of TCR fixes This bulletin addresses several security vulnerabilities. There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 6 and the IBM® Runtime Environment Java™ Technology Edition,...