CVE-2016-3027

IBM Security Access Manager for Web is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources...

CVE-2016-3027

CVE-2016-3027 affects IBM Security Access Manager products. The IBM Security Access Manager for Web (8.0 appliances, all firmware), Security Access Manager for Mobile (8.0), and Security Access Manager (9.0) are vulnerable to a denial of service due to an XML External Entity (XXE) issue when proc...

CVE-2016-8980

IBM BigFix Inventory v9 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources...

CVE-2016-6059: Improper Restriction of XML External Entity Reference

IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources...

Microsoft PowerShell XML External Entity Injection Vulnerability

Microsoft PowerShell is a command line scripting environment that runs on windows machines to automate system and application management. An XML external entity injection vulnerability exists in Microsoft PowerShell, which can be exploited by an attacker to obtain sensitive information and execut...

Microsoft Event Viewer XML External Entity Injection Vulnerability

Microsoft Event Viewer is a Microsoft program that displays logged errors, informational messages and warnings for application and system messages. An XML external entity injection vulnerability exists in Microsoft Event Viewer version 1.0, which can be exploited by an attacker to obtain sensitiv...

Microsoft Authorization Manager 'azman' XML External Entity Injection Vulnerability

Microsoft Authorization Manager is an authorization manager from Microsoft. An XML external entity injection vulnerability exists in the Microsoft Authorization Manager V6.1.7601 'azman' module, which can be exploited by an attacker to obtain sensitive information and execute arbitrary code in th...

XML External Entity Injection Vulnerability in Multiple VMware Products

VMware vCenter Server is a suite of server and virtualization management software from VMware, Inc. VMware vRealize Automation is a suite of cloud automation software from VMware, Inc. An XML external entity injection vulnerability exists in multiple VMware products and can be exploited by an...

SAP NetWeaver AS JAVA - 'BC-BMT-BPM-DSK' XML external entity injection vulnerability

1 It is possible, that an attacker can perform a DoS attack for example, an XML Entity expansion attack 2 An SMB Relay attack is a type of man-in-the-middle attack where an attacker asks a victim to authenticate to a machine controlled by the attacker, then relays the credentials to the target. T...

CS-Cart 4.3.10 - XML External Entity Injection Vulnerability

Exploit for php platform in category web applications Software : CS-Cart Ahmed sultan 0x4148 "; echo rawurlencodebase64encode$xml; ? change YOURHOST to your server address , use the output in the following POST request Action - HOST/cs-cart/index.php?dispatch=twigmo.post Data -...

CS-Cart 4.3.10 - XML External Entity Injection

Software : CS-Cart Ahmed sultan 0x4148 "; echo rawurlencodebase64encode$xml; ? change YOURHOST to your server address , use the output in the following POST request Action - HOST/cs-cart/index.php?dispatch=twigmo.post Data - action=addtocart&data=DATAOUTPUTHERE&format=xml a GET request will be se...

Oracle BI Publisher 11.1.1.6.011.1.1.7.011.1.1.9.012.2.1.0.0 - XML External Entity Injection

Oracle BI Publisher 11.1.1.6.011.1.1.7.011.1.1.9.012.2.1.0.0 - XML External Entity Injection Exploit Title: Oracle BI Publisher formerly XML Publisher - XML External Entity Injection w/o authentication Date: 20\10\2016 Exploit Author: Jakub Palaczynski CVE : CVE-2016-3473 Vendor Homepage:...

XXE External Entity Injection Vulnerability in Hikvision Elisa Live IP camera

Hangzhou Hikvision Digital Technology Co. Elisa Live IP camera is a network camera. Hikvision Elisa Live IP camera suffers from XXE external entity injection vulnerability. An attacker can exploit the vulnerability to obtain arbitrary files on a website, and in severe cases, obtain server control...

IBM Tivoli Endpoint Manager XML External Entity Injection Vulnerability

IBM Tivoli Endpoint Manager is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Networks Junos Space Multiple Vulnerabilities (JSA10760)

Juniper Networks Junos Space is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

RSA Enterprise Compromise Assessment Tool 4.1.0.1 - XML External Entity Injection

Exploit for multiple platform in category local exploits title: XML External Entity Injection XXE product: RSA Enterprise Compromise Assessment Tool ECAT vulnerable version: 4.1.0.1 fixed version: 4.1.2.0 CVE Number: - impact: Medium homepage: https://www.rsa.com found: 2016-04-27 by: Samandeep...

RSA Enterprise Compromise Assessment Tool (ECAT) 4.1.0.1 XXE Injection

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: XML External Entity Injection XXE product: RSA Enterprise Compromise Assessment Tool ECAT vulnerable version: 4.1.0.1 fixed version: 4.1.2.0 CVE Number: - impact: Medium...

IBM Security Privileged Identity Manager Virtual Appliance Denial of Service Vulnerability

IBM Security Privileged Identity Manager is an identity management product within the IBM Identity Governance and Management solution that protects, automates, and audits the use of privileged identities to help defend against insider threats and improve security. IBM Security Privileged Identity...

PT-2016-25

Name of the Vulnerable Software and Affected Versions SAP NetWeaver affected versions not specified Description The issue is related to a component that checks hidden content in the SAP NetWeaver platform, which has an incorrect restriction on XML links to external objects. This can be exploited ...

PT-2016-22

Name of the Vulnerable Software and Affected Versions SAP NetWeaver affected versions not specified Description The issue is related to the incorrect restriction of XML links to external objects in a component of the SAP NetWeaver platform. This could allow a remote attacker to gain access to...