Apache Tika Code Execution

The vulnerability of the tika-core, tika-pdf-module, and tika-parsers modules in the Apache Tika content discovery and analysis framework is related to an incorrect limitation on XML links to external objects. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by...

Akamai CloudTest XML Link Data Compromise

The vulnerability of the Akamai CloudTest performance testing platform relates to incorrect restrictions on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to compromise privacy...

OPC Factory Server XML External File System Access

The vulnerability of the OPC Factory Server data server is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the file system...

Windows Media Center XML Link Disclosure

The vulnerability of the Windows Media Center multimedia playback application is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to disclose protected information using a specially crafted .mcl file...

Cisco SD-WAN vManage Web Interface Unauthorized Access

The vulnerability in the vManage web interface of the Cisco SD-WAN program-defined network is related to errors in restricting XML links to external objects. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and to modify, add, or delete data...

Jenkins Token Macro Plugin XML Link Restriction

The vulnerability of the Jenkins Token Macro plugin is related to an incorrect limitation on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to forge requests on the server side or cause service failures...