5 matches found
EUVD-2014-2268
Malware in sbrugna...
Deserialization of untrusted data
The XStream extension in HP Fortify SCA before 2.2 RC3 allows remote attackers to execute arbitrary code via unsafe deserialization of XML messages...
CVE-2014-2228
The XStream extension in HP Fortify SCA before 2.2 RC3 allows remote attackers to execute arbitrary code via unsafe deserialization of XML messages...
PT-2020-7623
Name of the Vulnerable Software and Affected Versions HP Fortify SCA versions prior to 2.2 RC3 Description The issue allows remote attackers to execute arbitrary code via unsafe deserialization of XML messages. This is related to the XStream extension in HP Fortify SCA. Recommendations For versio...
CVE-2014-2228: Improper Restriction of Recursive Entity References in DTDs
The XStream extension in HP Fortify SCA before 2.2 RC3 allows remote attackers to execute arbitrary code via unsafe deserialization of XML messages...