Lucene search
+L

7 matches found

VulnCheck KEV
VulnCheck KEV
•added 2026/01/27 12:00 a.m.•16 views

VulnCheck KEV: CVE-2023-2806

A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function RequestInfoByXml of the component API. The manipulation leads to xml external entity reference. The associated identifier of this vulnerability is VDB-229411. NOTE: The...

8.8CVSS6.1AI score0.00984EPSS
SaveIn wildExploits1References42
BDU FSTEC
BDU FSTEC
•added 2023/05/29 12:00 a.m.•18 views

The vulnerability of the RequestInfoByXml function in the software interface of the API platform for collaborative work and automation of documentation processing in Weaver e-cology allows a malicious actor to gain access to read, modify, or delete data.

The vulnerability of the RequestInfoByXml function in the software interface of the API for collaborative work and automation of documentation processing in the Weaver e-cology platform is related to an incorrect limitation on XML links to external objects. Exploiting this vulnerability could all...

5.5CVSS6.3AI score0.00984EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2023/05/19 9:15 a.m.•18 views

CVE-2023-2806

A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function RequestInfoByXml of the component API. The manipulation leads to xml external entity reference. The associated identifier of this vulnerability is VDB-229411. NOTE: The...

8.8CVSS5.4AI score0.00984EPSS
SaveExploits1References3
Prion
Prion
•added 2023/05/19 9:15 a.m.•28 views

Xxe

A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function RequestInfoByXml of the component API. The manipulation leads to xml external entity reference. The associated identifier of this vulnerability is VDB-229411. NOTE: The...

5.2CVSS8.5AI score0.00984EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/19 8:31 a.m.•26 views

CVE-2023-2806 Weaver e-cology API RequestInfoByXml xml external entity reference

A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function RequestInfoByXml of the component API. The manipulation leads to xml external entity reference. The associated identifier of this vulnerability is VDB-229411. NOTE: The...

5.5CVSS6.8AI score0.00984EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/05/19 8:31 a.m.•53 views

CVE-2023-2806 Weaver e-cology API RequestInfoByXml xml external entity reference

A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function RequestInfoByXml of the component API. The manipulation leads to xml external entity reference. The associated identifier of this vulnerability is VDB-229411. NOTE: The...

5.5CVSS8.8AI score0.00984EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/19 12:00 a.m.•6 views

CVE-2023-2806: Improper Restriction of XML External Entity Reference

A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function RequestInfoByXml of the component API. The manipulation leads to xml external entity reference. The associated identifier of this vulnerability is VDB-229411. NOTE: The...

8.8CVSS5.4AI score0.00984EPSS
SaveExploits1References2
Rows per page
Query Builder