CVE-2016-9924

Zimbra Collaboration Suite ZCS before 8.7.4 allows remote attackers to conduct XML External Entity XXE attacks...

CVE-2016-9924

Zimbra Collaboration Suite ZCS before 8.7.4 allows remote attackers to conduct XML External Entity XXE attacks...

CVE-2016-9924

The CVE-2016-9924 issue affects Zimbra Collaboration Suite (ZCS) prior to 8.7.4, where XML External Entity (XXE) processing could be abused by remote attackers. The root cause is insecure XXE handling within ZCS’s XML processing, enabling an attacker to exploit XXE to disclose sensitive informati...

Zimbra Collaboration Suite XML External Entity Injection Vulnerability

Zimbra Collaboration is a suite of email and collaboration solutions from Zimbra USA. The solution offers email, contacts, calendaring, file sharing, social networking, and more. An XML external entity injection vulnerability exists in Zimbra Collaboration Suite. An attacker could exploit this...

python-pysaml2 XML External Entity Injection Vulnerability (CNVD-2017-05308)

PySAML2 is an implementation of SAML2 written in python. An XML external entity injection vulnerability exists in PySAML2 4.4.0 and earlier versions. A remote attacker can exploit this vulnerability to read arbitrary files by sending a specially crafted SAMPL XML request or response...

JIRA Server XML External Entity Injection and Code Execution Vulnerabilities

JIRA Server is a software developed by Atlassian Corporation for managing projects. JIRA Server suffers from an XML external entity injection vulnerability and an arbitrary code execution vulnerability. An attacker can exploit the vulnerabilities to execute arbitrary code, gain access to sensitiv...

NetIQ Access Manager Information Disclosure Vulnerability

NetIQ Access Manager provides a simple, secure, and scalable solution to handle all your Web access needs. An information disclosure vulnerability exists in NetIQ Access Manager. The vulnerability is caused due to ineffective filtering of incoming XML requests when parsed by the NAM Identity...

NetIQ Access Manager Information Disclosure Vulnerability (CNVD-2017-04728)

NetIQ Access Manager provides a simple, secure, and scalable solution to handle all your Web access needs. NetIQ Access Manager Information Disclosure Vulnerability. Since Access Manager 4.1 and 4.2 support risk-based authentication on the Identity Server. An attacker can obtain local file...

DEBIAN-CVE-2016-10149

XML External Entity XXE vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a crafted SAML XML request or response...

PYSEC-2017-25

XML External Entity XXE vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a crafted SAML XML request or response...

UBUNTU-CVE-2016-10149

XML External Entity XXE vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a crafted SAML XML request or response...

CVE-2017-6895

USB Pratirodh allows remote attackers to conduct XML External Entity XXE attacks via XML data in usb.xml...

CVE-2017-6895

USB Pratirodh allows remote attackers to conduct XML External Entity XXE attacks via XML data in usb.xml...

CVE-2016-5749

NetIQ Access Manager 4.1 before 4.1.2 HF 1 and 4.2 before 4.2.2 was parsing incoming SAML requests with external entity resolution enabled, which could lead to local file disclosure via an XML External Entity XXE attack...

CVE-2016-5748

External Entity Processing XXE vulnerability in the "risk score" application of NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be used to disclose the content of local files to logged-in users...

Xxe

NetIQ Access Manager 4.1 before 4.1.2 HF 1 and 4.2 before 4.2.2 was parsing incoming SAML requests with external entity resolution enabled, which could lead to local file disclosure via an XML External Entity XXE attack...

CVE-2016-5749

NetIQ Access Manager 4.1 before 4.1.2 HF 1 and 4.2 before 4.2.2 was parsing incoming SAML requests with external entity resolution enabled, which could lead to local file disclosure via an XML External Entity XXE attack...

CVE-2016-5748

External Entity Processing XXE vulnerability in the "risk score" application of NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be used to disclose the content of local files to logged-in users...

CVE-2016-5749

NetIQ Access Manager 4.1 before 4.1.2 HF 1 and 4.2 before 4.2.2 was parsing incoming SAML requests with external entity resolution enabled, which could lead to local file disclosure via an XML External Entity XXE attack...

Oracle Knowledge Management XXE Leading to a RCE

Vulnerability Summary The following advisory describe Information Disclosure found in Oracle Knowledge Management version 8.5.1. By enabling searches across a wide variety of sources, Oracle’s InQuira knowledge management products offer simple and convenient ways for users to access knowledge tha...