Lucene search
K

7 matches found

Veracode
Veracode
added 2019/01/15 8:56 a.m.27 views

Denial Of Service (DoS) Memory Consumption

Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service memory consumption via crafted Document Type Definitions DTDs, related to signatures...

4.3CVSS6.2AI score0.08863EPSS
Exploits0References36Affected Software67
BDU FSTEC
BDU FSTEC
added 2018/02/02 12:0 a.m.2 views

The vulnerability of the Apache XML-RPC library (ws-xmlrpc) is related to improper restrictions on XML links to external objects, which allows attackers to perform SSRF attacks.

The vulnerability of the Apache XML-RPC library ws-xmlrpc is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to perform SSRF attacks using specially crafted DTDs...

9.3CVSS7.8AI score0.08275EPSS
Exploits0References6Affected Software1
Broadcom
Broadcom
added 2017/11/17 12:0 a.m.6 views

BSA-2017-471

Security Advisory ID : BSA-2017-471 Component : Apache Santuario Revision : 2.0: Final Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service memory consumption via crafted Document Type Definitions DTDs, related to...

4.3CVSS6.9AI score0.08863EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2016/07/12 12:0 a.m.2 views

PT-2016-3245 · Apache · Apache Xml-Rpc Library

Name of the Vulnerable Software and Affected Versions: Apache XML-RPC library version 3.1.3 Description: The issue is related to an XML external entity XXE vulnerability in the Apache XML-RPC library. This vulnerability allows remote attackers to conduct server-side request forgery SSRF attacks v...

9.3CVSS8.3AI score0.08275EPSS
Exploits0References18
OSV
OSV
added 2014/12/31 12:28 p.m.6 views

MGASA-2014-0558 Updated xml-security packages fix CVE-2013-4517

Updated xml-security packages fixes security vulnerability: Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service memory consumption via crafted Document Type Definitions DTDs, related to signatures CVE-2013-4517...

4.3CVSS6.4AI score0.08863EPSS
Exploits0References3
Cvelist
Cvelist
added 2014/01/11 1:0 a.m.35 views

CVE-2013-4517

Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service memory consumption via crafted Document Type Definitions DTDs, related to signatures...

7.3AI score0.08863EPSS
Exploits0References22
Positive Technologies
Positive Technologies
added 2013/08/20 12:0 a.m.2 views

PT-2013-1364 · Apache · Apache Santuario Xml Security For Java

Name of the Vulnerable Software and Affected Versions: Apache Santuario XML Security for Java versions 1.5.5 and earlier Description: The issue allows remote attackers to cause a denial of service, specifically memory consumption, via crafted Document Type Definitions DTDs when applying Transform...

7.1CVSS7.4AI score0.08863EPSS
Exploits0References40
Rows per page
Query Builder