BSA-2017-332

Security Advisory ID : BSA-2017-332 Component : IBM JDK Revision : 3.0: Final IBM JDK versions 6.0.16.45, 7.0.10.5, 7.1.4.5, and 8.0.4.5 correct a security issue. IBMSDK, Java Technology Edition is vulnerable XML External Entity Injection XXE error when processing XML data. A remote attacker coul...

Cisco PI and EPNM XML External Entity Injection Vulnerability

Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network Manager EPNM are both products of the U.S. Cisco Cisco.PI is a set of solutions for wireless management through Cisco Prime LAN Management Solution LMS and Cisco Prime Network Control System NCS technologies; EPNM is a network...

Trend Micro InterScan Web Security XML Entity Injection Vulnerability

Trend Micro InterScan Web Security is a Web security gateway that provides dynamic, integrated security for enterprise networks against Web-based threats. Trend Micro InterScan Web Security suffers from an xml entity injection vulnerability. An attacker can exploit this vulnerability to read...

finecms has xml entity injection vulnerability

FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. An xml entity injection vulnerability exists in finecms. An attacker can use this vulnerability to obtain sensitive information in the database...

CVE-2016-9698

IBM Rhapsody DM is affected by CVE-2016-9698 due to an XML External Entity (XXE) processing flaw that can lead to denial of service and potential memory/resource exhaustion. Affected: Rational Software Architect/Design Manager versions 4.0.0–4.0.7, 5.0.0–5.0.2, and 6.0.0–6.0.2. Root cause: XXE in...

Xxe

IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote authenticated attacker could exploit this vulnerability to consume all available CPU resources and cause a denial of service...

CVE-2016-0254

IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote authenticated attacker could exploit this vulnerability to consume all available CPU resources and cause a denial of service...

Subsonic XML External Entity Injection Vulnerability

Subsonic is a media streaming server that allows users to save music or collect videos on the server. Subsonic suffers from an XML external entity injection vulnerability. An attacker could exploit the vulnerability to gain access to sensitive information or cause a denial of service...

Xxe

An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an authenticated user to read arbitrary files on the device...

CVE-2017-2308

The CVE-2017-2308 entry affects Juniper Networks Junos Space, with an XML External Entity (XXE) vulnerability in the web management interface. Affected: Junos Space versions prior to 16.1R1. The underlying issue allows an authenticated user to read arbitrary files on the device. Impact: Partial c...

SUSE-SU-2017:1444-1 Security update for java-1_6_0-ibm

This update for java-160-ibm fixes the following issues: - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c - CVE-2016-9842: zlib: Undefined left shift of negative number - CVE-2016-9843: zlib: Big-endian...

Trend Micro Deep Security 6.5 - XML External Entity Injection Local Privilege Escalation Remote Code Execution

Trend Micro Deep Security 6.5 - XML External Entity Injection Local Privilege Escalation Remote Code Execution The following advisory describes three 3 vulnerabilities found in Trend Micro Deep Security version 6.5. “The Trend Micro Hybrid Cloud Security solution, powered by XGen security, delive...

RESTEasy XML External Entity Injection Vulnerability

RESTEasy is the United States Red Hat Red Hat, Inc. of a JBoss open source project , which provides a variety of frameworks for building RESTful Web Services and RESTful Java applications . RESTEasy has an XML external entity injection vulnerability. An attacker could exploit this vulnerability t...

Exadel Flamingo XML External Entity Injection Vulnerability

Exadel Flamingo is a set of tools for bootstrapping RIA applications built with a Java backend. An XML external entity injection vulnerability exists in Exadel Flamingo version 2.2.0. An attacker could exploit this vulnerability to obtain sensitive information or cause a denial of service...

SUSE SLES11 Security Update : java-1_7_0-ibm (SUSE-SU-2017:1384-1)

This update for java-170-ibm fixes the following issues: Version update to 7.0-10.5 bsc1038505 - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c - CVE-2016-9842: zlib: Undefined left shift of negative number ...

SAP Composite Application Framework Authorization Tool XML External Entity Injection Vulnerability

SAP Composite Application Framework is the German SAP SAP company integrated SAP NetWeaver to create composite applications for the software. An XML external entity injection vulnerability exists in the SAP Composite Application Framework Authorization Tool. An attacker could exploit this...

SAP TranslationSupport Application XML External Entity Injection Vulnerability

SAP TranslationSupport Application is software from SAP Germany. An XML external entity injection vulnerability exists in the SAP TranslationSupport application. An attacker could exploit this vulnerability to gain access to sensitive information or cause a denial of service...

SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2017:1386-1)

This update for java-180-ibm fixes the following issues: Version update bsc1038505 : - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c - CVE-2016-9842: zlib: Undefined left shift of negative number -...

SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2017:1385-1)

This update for java-171-ibm fixes the following issues : - Version update to 7.1-4.5 bsc1038505 - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c - CVE-2016-9842: zlib: Undefined left shift of negative numbe...

SUSE-SU-2017:1385-1 Security update for java-1_7_1-ibm

This update for java-171-ibm fixes the following issues: - Version update to 7.1-4.5 bsc1038505 - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c - CVE-2016-9842: zlib: Undefined left shift of negative number...