CVE-2021-22498

XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management Previously known as Quality Center product. The vulnerability affects versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier and 15.5. The vulnerability could be exploited to allow an XML...

CVE-2021-22498

CVE-2021-22498 is an XML External Entity Injection vulnerability affecting Micro Focus Application Lifecycle Management (formerly Quality Center). The issue impacts versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier, and 15.5. The provided connected documents confirm the vulnera...

CVE-2021-22498

XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management Previously known as Quality Center product. The vulnerability affects versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier and 15.5. The vulnerability could be exploited to allow an XML...

Micro Focus Application Lifecycle Management Code Issue Vulnerability

Micro Focus Application Lifecycle Management is a unified platform for managing and automating activities, insights, and assets for the delivery of requirements-based applications through development, testing, and Agile delivery from Micro Focus, UK. A code issue vulnerability exists in Micro Foc...

XML Entity Injection Vulnerability in Alkacon OpenCms

Alkacon OpenCms is a set of open source content management system CMS developed using the Java language . Alkacon OpenCms suffers from an XML entity injection vulnerability that can be exploited by an attacker to access server resources...

Xxe

IBM Security Verify Privilege Manager 10.8 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A local attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 184883...

CVE-2020-4606

IBM Security Verify Privilege Manager 10.8 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A local attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 184883...

IBM Security Verify Privilege Manager 代码问题漏洞

IBM Security Verify Privilege Manager is a security management software for endpoint privilege management and application control in corporate environments from IBM, USA. The software stops unintentional downloads of malware and ransomware from attacking applications by removing local...

Security Bulletin: A Vulnerability Has Been Identified In IBM Security Verify Privilege Manager (CVE-2020-4606)

Summary A vulnerability identified in IBM Security Verify Privilege Manager previously known as IBM Security Privilege Manager has been addressed in the release 10.8.2 Vulnerability Details CVEID: CVE-2020-4606 DESCRIPTION: IBM Security Secret Server is vulnerable to an XML External Entity...

Plone 代码问题漏洞

Plone is an open source content management system. A XXE XML External Entity Injection vulnerability exists in Plone versions prior to 5.2.3. An attacker can exploit this vulnerability to conduct XXE attacks...

Veeam ONE SSRSReport XML External Entity Injection (CVE-2020-15418)

An XML external entity injection vulnerability exists in Veeam ONE. The vulnerability is due to insufficient handling of XML external entities in requests submitted to the server...

Kronos WebTA 代码问题漏洞

Kronos Webta is a software for managing office processes from kronos USA. The software is designed to automate and streamline the scheduling, leave management, leave donor and labor management processes. An external entity injection vulnerability exists in Kronos WebTA version 5.0.4, which can be...

Sonatype Nexus Repository Manager External Entity Injection Vulnerability

Sonatype Nexus Repository Manager NXRM is a Maven repository manager from Sonatype USA. An external entity injection vulnerability exists in the Sonatype Nexus Repository Manager product, which allows an attacker with Nexus Repository Manager administrator privileges to configure the system in su...

Sonatype Nexus Repository Manager 代码问题漏洞

Sonatype Nexus Repository Manager NXRM is a Maven repository manager from Sonatype USA. An external entity injection vulnerability exists in the Sonatype Nexus Repository Manager product, which allows an attacker with Nexus Repository Manager administrator privileges to configure the system in su...

XML Entity Injection Vulnerability in PowerEasy SiteFactory of Guangdong Dynamic Easy Software Co.

PowerEasy SiteFactory content management system English name: PowerEasy SiteFactory; software copyright registration number: 2014SR021600 is the industry's first based on the Microsoft.NET2.0 platform, using ASP.NET 2.0 for layered development of content management systems Content Management...

Anhui Weitong Technology Co., Ltd. Weitong open source mall management platform there are XML entity injection vulnerabilities

Microteam Mall is an open source WeChat small program mall front and back end open source : uniapp + Java, with seconds , coupons , multi-merchant , live selling , distribution and other functions , can be used to quickly build a WeChat small program mall . Anhui Weitong Technology Co., Ltd...

XML Entity Injection Vulnerability in NC Cloud of UFIDA Network Technology Corporation (CNVD-2020-64772)

NC Cloud is a digital platform for large enterprises, focusing on digital management, digital operation and digital business, helping large enterprises realize the comprehensive digitalization of people, money, goods and customers. An XML entity injection vulnerability exists in NC Cloud of UFIDA...

XML Entity Injection Vulnerability in NC Cloud of UFIDA Network Technology Co.

NC Cloud is a digital platform for large enterprises, focusing on digital management, digital operation and digital business, helping large enterprises realize the comprehensive digitalization of people, money, goods and customers. An XML entity injection vulnerability exists in NC Cloud of UFIDA...

XML Entity Injection Vulnerability in NC Cloud of UFIDA Network Technology Corporation (CNVD-2020-64771)

NC Cloud is a digital platform for large enterprises, focusing on digital management, digital operation and digital business, helping large enterprises realize the comprehensive digitalization of people, money, goods and customers. An XML entity injection vulnerability exists in NC Cloud of UFIDA...

IBM WebSphere Application Server 6.1.0.x <= 6.1.0.47 / 7.0.0.x < 7.0.0.43 / 8.0.0.x < 8.0.0.13 / 8.5.x < 8.5.5.10 XXE (CVE-2015-0254)

The IBM WebSphere Application Server running on the remote host is version 6.1.x through 6.1.0.47, 7.0.0.x prior to 7.0.0.43, 8.0.0.x prior to 8.0.0.13, or 8.5.0.x prior to 8.5.5.10. It is, therefore, affected by an XML external entity injection vulnerability in the Apache Standard Taglibs...