CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

osv_ghsa•added 2022/05/14 3:00 a.m.•93 views

GHSA-GQGV-2GP3-QQP3 WeChat Pay Java SDK allows XXE

WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL...

7.5CVSS7.6AI score0.01879EPSS

SaveExploits1References3

Github Security Blog•added 2022/05/14 3:00 a.m.•42 views

WeChat Pay Java SDK allows XXE

WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL...

7.5CVSS6.8AI score0.01879EPSS

SaveExploits1References3Affected Software1

Prion•added 2018/07/08 3:29 p.m.•39 views

Design/Logic Flaw

WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL...

5CVSS7.5AI score0.01879EPSS

SaveExploits1References1

Positive Technologies•added 2018/07/08 12:00 a.m.•11 views

PT-2018-11823

Name of the Vulnerable Software and Affected Versions WeChat Pay Java SDK affected versions not specified Description The issue involves an XXE XML External Entity attack through a merchant notification URL in the WXPayUtil component of the WeChat Pay Java SDK. Recommendations At the moment, ther...

7.5CVSS0.01879EPSS

SaveExploits1References4

Rapid7 Vulnerability Database (full)•added 2018/07/08 12:00 a.m.•11 views

CVE-2018-13439: Improper Restriction of XML External Entity Reference

WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL...

7.5CVSS7.4AI score0.01879EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by