CVE-2017-10670

An XML External Entity XXE issue exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 Java and OSCI Transport Library 1.6 .NET, exploitable by sending a crafted standard-conforming OSCI message from within the infrastructure...

PT-2017-11423

Name of the Vulnerable Software and Affected Versions OSCI Transport Library versions 1.6, 1.6.1 Description An XML External Entity XXE issue exists, which can be exploited by sending a crafted standard-conforming OSCI message from within the infrastructure. Recommendations For OSCI Transport...

CVE-2017-10670: Improper Restriction of XML External Entity Reference

An XML External Entity XXE issue exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 Java and OSCI Transport Library 1.6 .NET, exploitable by sending a crafted standard-conforming OSCI message from within the infrastructure...