CVE-2017-9458

XML external entity XXE vulnerability in the GlobalProtect internal and external gateway interface in Palo Alto Networks PAN-OS before 6.1.18, 7.0.x before 7.0.17, 7.1.x before 7.1.12, and 8.0.x before 8.0.3 allows remote attackers to obtain sensitive information, cause a denial of service, or...

SUSE SLES11 Security Update : expat (SUSE-SU-2017:2375-1)

This update for expat fixes the following issues : - CVE-2016-9063: Possible integer overflow to fix inside XMLParse leading to unexpected behaviour bsc1047240 - CVE-2017-9233: External Entity Vulnerability could lead to denial of service bsc1047236 Note that Tenable Network Security has extracte...

CVE-2015-3160

XML external entity XXE vulnerability in bkr/server/jobs.py in Beaker before 20.1 allows remote authenticated users to obtain sensitive information via submitting job XML to the server containing entity references which reference files from the Beaker server's file system...

CVE-2015-7241

XML External Entity XXE vulnerability in SAP Netweaver before 7.01...

Xxe

XML External Entity XXE vulnerability in SAP Netweaver before 7.01...

CVE-2015-7241

XML External Entity XXE vulnerability in SAP Netweaver before 7.01...

CVE-2015-7241

CVE-2015-7241 describes an XML External Entity (XXE) vulnerability in SAP NetWeaver before 7.01 due to the XML parser. The vulnerability allows potential unauthorized access and data exposure via XXE, as documented in multiple sources (NVD, CNVD, CVE lists) and corroborated by exploitation refere...

CVE-2015-3160

XML external entity XXE vulnerability in bkr/server/jobs.py in Beaker before 20.1 allows remote authenticated users to obtain sensitive information via submitting job XML to the server containing entity references which reference files from the Beaker server's file system...

Cisco SocialMiner XML External Entity Injection Vulnerability

A vulnerability in the web-based user interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to have read and write access to information stored in the affected system. The vulnerability is due to improper handling of XML External Entity XXE entries when parsing an XML fil...

SUSE-SU-2017:2375-1 Security update for expat

This update for expat fixes the following issues: - CVE-2016-9063: Possible integer overflow to fix inside XMLParse leading to unexpected behaviour bsc1047240 - CVE-2017-9233: External Entity Vulnerability could lead to denial of service bsc1047236...

IBM QRadar Network Security XML External Entity Injection Vulnerability

IBM QRadar Network Security is a suite of network threat protection software from IBM in the United States. The software uses deep packet inspection and behavior-based analysis to detect and protect against known and unknown threats. An XML external entity injection vulnerability exists in IBM...

CVE-2017-1458

IBM QRadar Network Security 5.4 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 128377...

Xxe

IBM QRadar Network Security 5.4 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 128377...

CVE-2017-1458

IBM QRadar Network Security 5.4 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 128377...

CVE-2017-1458

CVE-2017-1458 affects IBM QRadar Network Security 5.4. The issue is an XML External Entity (XXE) vulnerability in XML data processing, potentially exposing sensitive information or causing memory/resource depletion. The IBM bulletin states a fixed version: firmware 5.4.0.2. Remediation options in...

openSUSE Security Update : expat (openSUSE-2017-993)

This update for expat fixes the following issues : - CVE-2016-9063: Possible integer overflow to fix inside XMLParse leading to unexpected behaviour bsc1047240 - CVE-2017-9233: External Entity Vulnerability could lead to denial of service bsc1047236 This update was imported from the...

Automated Logic Corporation Multiple Device XML External Entity Vulnerability

Automated Logic provides a full range of building MEP control systems for a wide range of users, including central air conditioning automation, variable power distribution monitoring, water supply and drainage monitoring, lighting monitoring and elevator monitoring. The system has been widely use...

Siemens OPC UA Protocol XML External Entity Vulnerability

Siemens industrial products are based on the OPC foundation of the OPC UAP protocol to discover and configure LAN device information. An XML external entity vulnerability exists in the Siemens OPC UA protocol, which can be exploited by an attacker to access various resources by sending specially...

XML External Entity (XXE) in PAN-OS

A vulnerability exists in PAN-OS’s GlobalProtect internal and external gateway interface that could allow for XML External Entity XXE attack. PAN-OS does not properly parse XML input. Ref PAN-75688 / CVE-2017-9458 Successful exploitation of this issue may allow disclosure of information, denial o...

CVE-2017-12069

An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server LDS before 1.03.367. Among the affected products are Siemens SIMATIC PCS7 All versions V8.1 and earlier, SIMATIC WinCC All versions V7.4 SP1, SIMATIC WinCC Runtime...