29 matches found
XML External Entity (XXE)
Apache cayenne-server is vulnerable to XML external entity XXE. The XML external entity declaration is not disabled in the XML parser of the CayenneModeler and allows an attacker to access local or remote content via a declared system identifier...
8.1CVSS7.7AI score0.02974EPSS
SaveExploits0References6Affected Software1
MS:560C3792-85AE-4040-A69F-428B6865DB22
...
7AI score
SaveExploits0
MS:209B0D89-F354-4CBE-8C3C-C7C06DA33E27
...
7AI score
SaveExploits0
MS:3DAF8D62-98DD-4A28-B106-536F0796794D
...
7AI score
SaveExploits0
MS:672C7DE4-8447-464D-8FF7-9618043BC259
...
7AI score
SaveExploits0
MS:6B383F6A-EBC8-4EE5-8A93-2D62B1B859E8
...
7AI score
SaveExploits0
MS:6903356F-899E-4C4E-9BB9-43356DDAC0F1
...
7AI score
SaveExploits0
20