26 matches found
Nokogiri XML External Object Reference Unauthorized Access
The vulnerability of the Nokogiri library is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
GeoServer WFS Disclosure
The vulnerability in the GeoServer Web Feature Service WFS software, used for managing and publishing geospatial data on the OSGeo GeoServer server, is related to an incorrect limitation on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to disclose...
PT-2025-30599 · Fast Reports · Fastreport .Net
Уязвимость библиотеки генерации отчетов и документов FastReport .NET связана с неверным ограничением XML-ссылок на внешние объекты. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить несанкционированный доступ на чтение файлов и осуществить SSRF-атаку...
ROS-20250609-01
A vulnerability in the DOMDeserializer component of the FasterXML jackson-databind library is related to an incorrect restriction of XML links to external objects. Exploitation of the vulnerability could allow an attacker, acting remotely, to conduct XXE attacks...
Operations Bridge Manager XML External Object Disclosure
The vulnerability of the software platform for monitoring and managing IT infrastructure, Operations Bridge Manager OBM, is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized...
Apache Zeppelin XML Link Disclosure
The vulnerability of the interactive browser environment for data analysis and visualization in Apache Zeppelin SAP is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service...
PT-2024-1590
Name of the Vulnerable Software and Affected Versions Qualys Jenkins Plugin for Policy Compliance versions prior to 1.0.6 Description The issue is related to the Qualys Policy Compliance Connector Plugin and involves incorrect restriction of XML links to external objects, allowing a remote attack...
OpenCMS XML External Object Code Execution
The vulnerability of the OpenCMS content management system is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted POST request remotely...
Cisco Identity Services Engine SSRF
The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform relates to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or perform a SSRF attac...
Adobe Experience Manager XML Link Disclosure
The vulnerability of the Adobe Experience Manager content and media data management system is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...
Adobe Experience Manager XML Link Disclosure
The vulnerability of the Adobe Experience Manager content and media data management system is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...
PT-2021-7025
Name of the Vulnerable Software and Affected Versions Cisco Enterprise NFV Infrastructure Software NFVIS affected versions not specified Description The issue concerns multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software NFVIS that could allow an attacker to escape from the...
ASSAID XML External Object SSRF
The vulnerability of the “ASSaD-ID” biometrics system’s software is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack and execute arbitrary code within the system...
PT-2021-4474
Name of the Vulnerable Software and Affected Versions АССаД-ID affected versions not specified Description The issue is related to incorrect restriction of XML links to external objects, which can be exploited by a remote attacker to perform an SSRF attack and execute arbitrary code in the system...
IBM Cognos Analytics XML External Object Access
The vulnerability of the online business analytics service IBM Cognos Analytics is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures...
PT-2021-3248
Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics versions 11.0 through 11.1 Description The issue is related to the incorrect restriction of XML links to external objects, which can be exploited by a remote attacker to impact the confidentiality and availability of...
WebReports XML External Object Disclosure
The vulnerability of the WebReports report server is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...
PT-2020-5511
Name of the Vulnerable Software and Affected Versions Nokogiri versions prior to 1.11.0.rc4 Nokogiri versions 1.10.10 and earlier Nokogiri prereleases 1.11.0.rc1, 1.11.0.rc2, and 1.11.0.rc3 Description The issue is related to the incorrect restriction of XML links to external objects, allowing...
Intel Quartus Prime Automated Design XML External Object Access
The vulnerability of Intel Quartus Prime Pro and Intel Quartus Prime Standard automated design systems is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...
XmlLite.dll DoS
The vulnerability of the XmlLite.dll library in the Windows operating system is related to errors in restricting XML links to external objects. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted requests...