8 matches found
CVE-2018-1000836
bw-calendar-engine version = bw-calendar-engine-3.12.0 contains a XML External Entity XXE vulnerability in IscheduleClient XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Man in the Middle or malicious...
XML External Entity Injection (XXE)
bw-calendar-engine-impl is vulnerable to XML external entity injection XXE. The vulnerability exists since the IscheduleClient XML parser does not restrict external DTDs which would allow an attacker to perform XXE attacks via a crafted XML document...
XML External Entity (XXE) vulnerability in bw-calendar-engine
bw-calendar-engine version = bw-calendar-engine-3.12.0 contains a XML External Entity XXE vulnerability in IscheduleClient XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Man in the Middle or malicious...
CVE-2018-1000836
bw-calendar-engine version = bw-calendar-engine-3.12.0 contains a XML External Entity XXE vulnerability in IscheduleClient XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Man in the Middle or malicious...
CVE-2018-1000836
bw-calendar-engine version = bw-calendar-engine-3.12.0 contains a XML External Entity XXE vulnerability in IscheduleClient XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Man in the Middle or malicious...
CVE-2018-1000836
CVE-2018-1000836 affects bw-calendar-engine (
CVE-2018-1000836: Improper Restriction of XML External Entity Reference
bw-calendar-engine version = bw-calendar-engine-3.12.0 contains a XML External Entity XXE vulnerability in IscheduleClient XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Man in the Middle or malicious...
PT-2018-9560
Name of the Vulnerable Software and Affected Versions bw-calendar-engine versions prior to 3.12.0 Description The issue concerns a XML External Entity XXE vulnerability in the IscheduleClient XML Parser. This can lead to disclosure of confidential data, denial of service, Server-Side Request...