Information Builders WebFOCUS Business Intelligence XML External Entity Injection Vulnerability

Information Builders WebFOCUS Business Intelligence BI is a suite of business intelligence and analytics platforms from Information Builders, Inc. in the United States. The platform provides data analysis tools, applications, reporting and document generation. Information Builders WebFOCUS Busine...

CVE-2020-14204

In WebFOCUS Business Intelligence 8.0 SP6, the administration portal allows remote attackers to read arbitrary local files or forge server-side HTTP requests via a crafted HTTP request to /ibiapps/WFServlet.cfg because XML external entity injection is possible. This is related to making changes t...

Xxe

In WebFOCUS Business Intelligence 8.0 SP6, the administration portal allows remote attackers to read arbitrary local files or forge server-side HTTP requests via a crafted HTTP request to /ibiapps/WFServlet.cfg because XML external entity injection is possible. This is related to making changes t...

CVE-2020-14204

CVE-2020-14204 affects WebFOCUS Business Intelligence 8.0 (SP6). The vulnerability is XML External Entity Injection in the WebFOCUS BI XML processing, enabling remote attackers to read arbitrary local files or forge server-side HTTP requests via a crafted HTTP request to /ibi_apps/WFServlet.cfg. ...

CVE-2020-4509

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 182364...

Xxe

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 182364...

CVE-2020-4509

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 182364...

CVE-2020-4509

IBM QRadar SIEM (7.3 and 7.4) is affected by CVE-2020-4509, a XML External Entity (XXE) injection in XML processing that could expose sensitive data or exhaust memory. The issue is tied to SDEE protocol handling, with base CVSS v3.1/3.0 scores around 7.6 (HIGH) and 5.5 (MEDIUM) in different vecto...

Security Bulletin: IBM QRadar is vulnerable to an XML External Entity Injection (XXE) attack (CVE-2020-4509)

Summary IBM QRadar is vulnerable to an XML External Entity Injection XXE attack when processing XML data Vulnerability Details CVEID: CVE-2020-4509 DESCRIPTION: IBM QRadar is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this...

CVE-2020-4246

IBM Security Identity Governance and Intelligence 5.2.6 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 175481...

CVE-2020-4246

CVE-2020-4246 affects IBM Security Identity Governance and Intelligence (IGI) 5.2.6. The flaw is an XML External Entity (XXE) vulnerability when processing XML data, allowing a remote attacker to expose sensitive information or consume memory resources. Affected product: IBM IGI 5.2.6; root cause...

IBM Security Identity Governance and Intelligence XML External Entity Injection Vulnerability

IBM Security Identity Governance and Intelligence IGI is a suite of identity governance solutions from IBM in the United States. The product includes features such as lifecycle management, access risk assessment and identity management. A security vulnerability exists in IBM Security IGI version...

BlogEngine 3.3 - (syndication.axd) XML External Entity Injection Vulnerability

Exploit for xml platform in category web applications Title: BlogEngine 3.3 - 'syndication.axd' XML External Entity Injection Author: Daniel Martinez Adan aDoN90 Homepage: https://blogengine.io/ Software Link: https://blogengine.io/support/download/ Affected Versions: 3.3 Vulnerability: XML...

BlogEngine 3.3 - 'syndication.axd' XML External Entity Injection

Title: BlogEngine 3.3 - 'syndication.axd' XML External Entity Injection Author: Daniel Martinez Adan aDoN90 Date: 2020-05-01 Homepage: https://blogengine.io/ Software Link: https://blogengine.io/support/download/ Affected Versions: 3.3 Vulnerability: XML External Entity XXE OOB Injection...

BlogEngine 3.3 XML Injection

Name: XML External Entity Injection OOB Vulnerability in BlogEngine 3.3 Affected Software: BlogEngine Affected Versions: 3.3 Homepage: https://blogengine.io/ Vulnerability: XML External Entity XXE OOB Injection Vulnerability Severity: High Status: Fixed Author: Daniel Martinez Adan aDoN90 CVSS...

Security Bulletin: Security vulnerabilities in Apache Tomcat in Rational DOORS Web Access

Summary The Apache Tomcat application server in installations of IBM Rational DOORS Web Access version contains security vulnerabilities. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information...

Security Bulletin: Multiple Vulnerabilities in libpng and libxml affect Rational DOORS

Summary Multiple vulnerabilities in libpng and libxml affect Rational DOORS Vulnerability Details CVE-ID: CVE-2015-1819 Description: Libxml is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error in the xmlreader when processing XML data. A remote attacker could...

Xxe

For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ Engineering 1.1 to...

CVE-2020-8479

CVE-2020-8479 is an XML External Entity Injection vulnerability in ABB Central Licensing Server components across ABB Ability System 800xA, Compact HMI, and related products. The issue allows an attacker to read or call arbitrary files from the license server and/or the network, and can also bloc...

CVE-2020-8479 ABB Central Licensing System - XML External Entity Injection

For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ Engineering 1.1 to...