CVE-2022-47966

CVE-2022-47966 POC for CVE-2022-47966 affecting the following ManageEngine products: Access Manager Plus Active Directory 360 ADAudit Plus ADManager Plus ADSelfService Plus Analytics Plus Application Control Plus Asset Explorer Browser Security Plus Device Control Plus Endpoint Central Endpoint...

CVE-2022-47966-Scan

CVE-2022-47966 扫描器 关于 CVE-2022-47966 是一个严重的未经身份验证的远程代码执行漏洞，影响了至少 24 款本地部署的 ManageEngine 产品。该漏洞仅在启用 SAML SSO 时适用。对于部分产品，如果之前启用过 SAML SSO 也同样适用。 时间线 CVE-2022-47966 由 Viettel Cyber Security 的 Khoadha 发现，似乎已在 2022 年 10 月针对受影响产品进行了修补。该漏洞存在于所有受影响应用使用的第三方库 Apache Santuario 中。 然而，ManageEngine 直到 2023 年 1...

OESA-2025-2383 xml-security security update

The XML Security project is aimed at providing implementation of security standards for XML. Currently the focus is on the W3C standards : - XML-Signature Syntax and Processing; and - XML Encryption Syntax and Processing. Security Fixes: All versions of Apache Santuario - XML Security for Java...

EUVD-2012-4007

Malware in sbrugna...

EUVD-2013-2164

Malware in sbrugna...

EUVD-2013-2119

Malware in sbrugna...

EUVD-2013-2121

Malware in sbrugna...

EUVD-2019-0620

Malware in sbrugna...

EUVD-2013-2118

Malware in sbrugna...

EUVD-2021-2083

Malware in sbrugna...

EUVD-2022-5065

Malicious code in bioql PyPI...

EUVD-2023-2836

Malicious code in bioql PyPI...

EUVD-2022-5522

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-40690

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the secureValidation property is not passed...

Linux Distros Unpatched Vulnerability : CVE-2023-44483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a privat...

Security Bulletin: IBM Cognos Analytics is affected by multiple vulnerabilities

Summary IBM Cognos Analytics is affected by vulnerabilities in IBM WebSphere Application Server Liberty and Open-Source Software OSS. Issues related to these components have been addressed by upgrading or removing the vulnerable libraries. Additionally, a cross-site scripting XSS vulnerability ha...

Linux Distros Unpatched Vulnerability : CVE-2019-12400

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of...

Security Bulletin: Multiple vulnerabilities in IBM WebSphere Liberty Profile affect IBM Robotic Process Automation.

Summary Multiple vulnerabilities in IBM WebSphere Liberty Profile affect IBM Robotic Process Automation. IBM WebSphere Liberty Profile is used by IBM Robotic Process Automation as part of UMS and as an application server for container deployments. This bulletin identifies the security fixes to...

Security Bulletin: IBM Sterling Global High Availability Mailbox is affected by IBM WebSphere Application Server Liberty is vulnerable to information disclosure due to Apache Santuario (CVE-2023-44483)

Summary IBM Sterling Global High Availability Mailbox is affected by a vulnerability in the Apache Santuario library used by IBM WebSphere Application Server Liberty when the wsSecurity-1.1, wsSecuritySaml-1.1 or samlWeb-2.0 feature is enabled. Vulnerability Details CVEID:CVE-2023-44483...

Security Bulletin: IBM Observability with Instana is affected by Multiple Security Vulnerabilities

Summary Multiple vulnerabilities were addressed in IBM Observability with Instana in build 1.285.0 Vulnerability Details CVEID:CVE-2021-40690 DESCRIPTION: Apache Santuario XML Security for Java could allow a remote attacker to bypass security restrictions, caused by the improper passing of the...