CVE-2018-18895

...

CVE-2018-18895

CVE-2018-18895 is a duplicate of CVE-2014-3004 (Castor XML External Entity Injection). Connected documents reference CVE-2014-3004 and describe Castor Library XXE impacts remediated in IBM advisories and security bulletins. Affected contexts include Castor Library usage in IBM BPM/Workflow compon...

Cisco WebEx Meetings Server XML Injection

I. VULNERABILITY ------------------------- Cisco WebEx Meetings Server XML External Entity II. CVE REFERENCE ------------------------- CVE-2018-18895 III. VENDOR ------------------------- http://cisco.com IV. TIMELINE ------------------------ 18/09/2018 Vulnerability discovered 19/09/2018 Vendor...