CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

118 matches found

NVD•added 2024/05/03 7:15 p.m.•29 views

CVE-2022-22364

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to external service interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrar...

5.3CVSS5.8AI score0.00539EPSS

SaveExploits0References2

CVE•added 2024/05/03 6:14 p.m.•71 views

CVE-2022-22364

CVE-2022-22364 affects IBM Controller: 10.4.1, 10.4.2, and 11.0.0. The issue is an External Service Interaction vulnerability caused by improper validation of user-supplied input, allowing a remote attacker to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary...

5.3CVSS6.6AI score0.00539EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2024/05/03 6:14 p.m.•27 views

CVE-2022-22364 IBM Cognos Controller security bypass

5.3CVSS5.5AI score0.00539EPSS

SaveExploits0References2

Vulnrichment•added 2024/05/03 6:14 p.m.•16 views

CVE-2022-22364 IBM Cognos Controller security bypass

5.3CVSS6.7AI score0.00539EPSS

SaveExploits0References2

OSV•added 2023/09/28 8:15 p.m.•14 views

CVE-2023-43323

mooSocial 3.1.8 is vulnerable to external service interaction on post function. When executed, the server sends a HTTP and DNS request to external server. The Parameters effected are multiple - messageText, datawallphoto, datauserShareVideo and datauserShareLink...

6.5CVSS5.8AI score0.0186EPSS

SaveExploits2References1

attackerkb•added 2023/09/28 8:15 p.m.•12 views

CVE-2023-43323

6.5CVSS5.8AI score0.0186EPSS

SaveExploits2References3

NVD•added 2023/09/28 8:15 p.m.•36 views

CVE-2023-43323

6.5CVSS6.5AI score0.0186EPSS

SaveExploits2References1

CVE•added 2023/09/28 12:00 a.m.•94 views

CVE-2023-43323

CVE-2023-43323 affects mooSocial 3.1.8. The vulnerability is external service interaction in the post function, where requests to external servers may be triggered via parameters messageText, data[wall_photo], data[userShareVideo], and data[userShareLink]. The issue has a documented PoC/exploit p...

6.5CVSS6.4AI score0.0186EPSS

SaveExploits2References1Affected Software1

Vulnrichment•added 2023/09/28 12:00 a.m.•14 views

CVE-2023-43323

6.8AI score0.0186EPSS

SaveExploits2References1

Cvelist•added 2023/09/28 12:00 a.m.•43 views

CVE-2023-43323

6.7AI score0.0186EPSS

SaveExploits2References1

Exploit DB•added 2023/09/08 12:00 a.m.•498 views

Drupal 10.1.2 - web-cache-poisoning-External-service-interaction

Title: drupal-10.1.2 web-cache-poisoning-External-service-interaction Author: nu11secur1ty Date: 08/30/2023 Vendor: https://www.drupal.org/ Software: https://www.drupal.org/download Reference: https://portswigger.net/kb/issues/00300210external-service-interaction-http Description: It is possible ...

5.3AI score

SaveExploits0

OSV•added 2023/02/08 8:15 p.m.•14 views

CVE-2022-34350

IBM API Connect 10.0.0.0 through 10.0.5.0, 10.0.1.0 through 10.0.1.7, and 2018.4.1.0 through 2018.4.1.20 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to...

7.5CVSS5.9AI score0.00645EPSS

SaveExploits0References2

NVD•added 2023/02/08 8:15 p.m.•26 views

CVE-2022-34350

7.5CVSS6.3AI score0.00645EPSS

SaveExploits0References2

Prion•added 2023/02/08 8:15 p.m.•30 views

Input validation

5CVSS7.4AI score0.00645EPSS

SaveExploits0References2Affected Software1

Vulnrichment•added 2023/02/08 7:12 p.m.•6 views

CVE-2022-34350 IBM API Connect security bypass

5.3CVSS6.8AI score0.00645EPSS

SaveExploits0References2

CVE•added 2023/02/08 7:12 p.m.•77 views

CVE-2022-34350

CVE-2022-34350 – IBM API Connect is affected by an External Service Interaction vulnerability caused by improper validation of user-supplied input. Affected versions: 10.0.0.0–10.0.5.0, 10.0.1.0–10.0.1.7, and 2018.4.1.0–2018.4.1.20. The issue can induce the application to perform server-side DNS ...

7.5CVSS6.3AI score0.00645EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2023/02/08 7:12 p.m.•34 views

CVE-2022-34350 IBM API Connect security bypass

5.3CVSS7.5AI score0.00645EPSS

SaveExploits0References2

IBM Security Bulletins•added 2023/02/02 12:30 a.m.•34 views

Security Bulletin: IBM API Connect is impacted by an external service interaction vulnerability (CVE-2022-34350)

Summary IBM API Connect has addressed the following external service interaction vulnerability CVE-2022-34350. Vulnerability Details CVEID:CVE-2022-34350 DESCRIPTION: IBM API Connect is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remo...

7.5CVSS6.3AI score0.00645EPSS

SaveExploits0Affected Software1

RedHat Linux•added 2022/10/05 10:44 a.m.•11 views

Business-central: Possible XML External Entity Injection attack

An XML external entity injectionXXE vulnerability was found in Business Central. This flaw allows an attacker to interfere with an application's processing of XML data. This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. T...

8.2CVSS5.7AI score0.00775EPSS

SaveExploits0References4

Hacker One•added 2022/09/19 12:13 a.m.•63 views

U.S. Dept Of Defense: External service interaction ( DNS and HTTP ) in www.████████

An External Service Interaction vulnerability was found in www.█████████, allowing an attacker to induce the application to interact with arbitrary external services such as DNS and HTTP. This could lead to various attacks, including DDoS, OS Command Injection, DOS, and Code Manipulation...

7.6AI score

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by