Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-2917

Malware in sbrugna...

6.5CVSS6.5AI score0.01835EPSS
Exploits2References5
RedhatCVE
RedhatCVE
added 2025/05/22 10:14 a.m.14 views

CVE-2019-11216

BMC Smart Reporting 7.3 20180418 allows authenticated XXE within the import functionality. One can import a malicious XML file and perform XXE attacks to download local files from the server, or do DoS attacks with XML expansion attacks. XXE with direct response and XXE OOB are allowed...

6.5CVSS6.6AI score0.01835EPSS
Exploits2References1
NVD
NVD
added 2019/12/04 8:15 p.m.35 views

CVE-2019-11216

BMC Smart Reporting 7.3 20180418 allows authenticated XXE within the import functionality. One can import a malicious XML file and perform XXE attacks to download local files from the server, or do DoS attacks with XML expansion attacks. XXE with direct response and XXE OOB are allowed...

6.5CVSS6.4AI score0.01835EPSS
Exploits2References3
Prion
Prion
added 2019/12/04 8:15 p.m.18 views

Design/Logic Flaw

BMC Smart Reporting 7.3 20180418 allows authenticated XXE within the import functionality. One can import a malicious XML file and perform XXE attacks to download local files from the server, or do DoS attacks with XML expansion attacks. XXE with direct response and XXE OOB are allowed...

5.5CVSS6.3AI score0.01835EPSS
Exploits2References3Affected Software1
Cvelist
Cvelist
added 2019/12/04 7:31 p.m.34 views

CVE-2019-11216

BMC Smart Reporting 7.3 20180418 allows authenticated XXE within the import functionality. One can import a malicious XML file and perform XXE attacks to download local files from the server, or do DoS attacks with XML expansion attacks. XXE with direct response and XXE OOB are allowed...

6.4AI score0.01835EPSS
Exploits2References3
CVE
CVE
added 2019/12/04 7:31 p.m.44 views

CVE-2019-11216

CVE-2019-11216 affects BMC Smart Reporting 7.3 (20180418). The issue is an XML External Entity (XXE) vulnerability in the import functionality, enabling an authenticated attacker to import a malicious XML file to perform XXE attacks, potentially downloading local server files or triggering DoS vi...

6.5CVSS6.3AI score0.01835EPSS
Exploits2References3Affected Software1
CNVD
CNVD
added 2019/12/04 12:0 a.m.2 views

BMC Smart Reporting XML External Entity Injection Vulnerability

BMC Smart Reporting is a smart reporting system. BMC Smart Reporting suffers from an XML External Entity Injection vulnerability that allows an authenticated attacker with administrator privileges to import a malicious XML file and perform an XXE attack to download a local file from a server, or...

6.5CVSS6.9AI score0.01835EPSS
Exploits2References1
Packet Storm
Packet Storm
added 2019/12/04 12:0 a.m.215 views

BMC Smart Reporting 7.3 20180418 XML Injection

4 43 7.3 20180418 2019-01-18 10:14 UTC +0000 66717 sour...

6.6AI score0.01835EPSS
Exploits2
Rows per page
Query Builder