Design/Logic Flaw

An XML entity injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can craft document type definition for an XML representing XML layout. The crafted document type definition and XML layout allow processing of external...

CVE-2019-8126

An XML entity injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can craft document type definition for an XML representing XML layout. The crafted document type definition and XML layout allow processing of external...

CVE-2019-8126

CVE-2019-8126 describes an XML entity injection vulnerability in Magento: versions 2.2 before 2.2.10 and 2.3 before 2.3.3 (or 2.3.2-p1) allow an authenticated admin to craft a document type definition for an XML layout, enabling processing of external entities and potential information disclosure...

Citrix StoreFront Server 7.15 - XML External Entity Injection

Citrix StoreFront Server 7.15 - XML External Entity Injection Exploit Title: Citrix StoreFront Server 7.15 - XML External Entity Injection Date: 2019-08-28 Exploit Author: Vahagn Vardanya Vendor Homepage:https://www.citrix.com/downloads/storefront/ Software Link:...

Citrix StoreFront Server 7.15 - XML External Entity Injection

Exploit Title: Citrix StoreFront Server 7.15 - XML External Entity Injection Date: 2019-08-28 Exploit Author: Vahagn Vardanya Vendor Homepage:https://www.citrix.com/downloads/storefront/ Software Link: https://support.citrix.com/article/CTX251988 Version: Citrix StoreFront Server earlier than 190...

Xxe

An XML External Entity Injection vulnerability exists in Dzone AnswerHub...

CVE-2017-15725

CVE-2017-15725: An XML External Entity (XXE) vulnerability in Dzone AnswerHub. NVD metrics show CVSSv2 base 5.0 (Partial confidentiality) and CVSSv3.1 base 7.5 (High) with network attack vector and no user interaction. No exploitation details or fixes are provided in the documents.

CVE-2017-15725

An XML External Entity Injection vulnerability exists in Dzone AnswerHub...

CVE-2019-8087

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2019-8086

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2019-8086

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2019-8087

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Successful exploitation could lead to sensitive information disclosure...

Xxe

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2019-8087

CVE-2019-8087 affects Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2. The issue is an XML External Entity (XXE) injection that could lead to sensitive information disclosure. Root cause is XXE in AEM’s handling of XML external entities. Public details confirm the vulnerability exists and...

CVE-2019-8082

Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2019-8082

Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2019-8082

CVE-2019-8082 affects Adobe Experience Manager 6.4, 6.3 and 6.2, which are vulnerable to XML External Entity (XXE) injection. Exploitation could lead to disclosure of sensitive information. Public details in connected sources reaffirm the affected versions and the impact. The linked advisory APSB...

CVE-2019-8082

Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Successful exploitation could lead to sensitive information disclosure...

Adobe Experience Manager XML External Entity Injection Vulnerability (CNVD-2019-37123)

Adobe Experience Manager is an enterprise content management solution that helps you simplify the management and delivery of your content and assets. An XML external entity injection vulnerability exists in Adobe Experience Manager 6.2, 6.3, 6.4, and 6.5. An attacker can exploit this vulnerabilit...

Adobe Experience Manager XML External Entity Injection Vulnerability (CNVD-2019-37122)

Adobe Experience Manager is an enterprise content management solution that helps you simplify the management and delivery of your content and assets. An XML external entity injection vulnerability exists in Adobe Experience Manager 6.0, 6.1, 6.2, 6.3, 6.4, 6.5. An attacker can exploit this...