Xxe

An XML External Entity XXE processing vulnerability was reported in Lenovo XClarity Administrator LXCA prior to version 2.5.0 , Lenovo XClarity Integrator LXCI for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator LXCI for VMWare vCenter prior to version 6.1.0 that...

CVE-2019-6179

CVE-2019-6179 is an XML External Entity (XXE) processing vulnerability found in Lenovo XClarity Administrator (LXCA) before 2.5.0, Lenovo XClarity Integrator (LXCI) for Microsoft System Center before 7.7.0, and LXCI for VMware vCenter before 6.1.0. The issue, as described in Lenovo’s advisory, co...

PT-2019-4348 · Microsoft +2 · System Center +4

Name of the Vulnerable Software and Affected Versions: Lenovo XClarity Administrator versions prior to 2.5.0 Lenovo XClarity Integrator LXCI for Microsoft System Center versions prior to 7.7.0 Lenovo XClarity Integrator LXCI for VMWare vCenter versions prior to 6.1.0 Description: A vulnerability...

XXE Injection Vulnerability in UsualToolCMS Frontend

UsualToolCMS UTCMS is an enterprise web content management system CMS based on PHP and MySQL. An XXE injection vulnerability exists in the frontend of UsualToolCMS. An attacker can exploit the vulnerability to remotely read arbitrary files on the server...

Security Bulletin: Multiple vulnerabilities in WebSphere Application Server affect IBM Business Process Manager (BPM), WebSphere Process Server (WPS) and WebSphere Lombardi Edition (WLE) (Java CPU April 2017)

Summary WebSphere Application Server is shipped as a component of IBM Business Process Manager, WebSphere Process Server, and WebSphere Lombardi Edition. WebSphere Application Server Liberty is shipped as a component of the optional BPM component Process Federation Server. Information about...

CVE-2019-13608

Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 3.12.4000, and 7.6 LTSR before CU8 3.0.8000 allows XXE attacks...

Citrix Systems StoreFront Server XML External Entity Injection Vulnerability

Citrix Systems StoreFront Server is an enterprise application store from Citrix Systems USA. The product focuses on providing users with an interface to remotely access XenDesktop and XenApp virtual desktops and applications. An XML external entity injection vulnerability exists in Citrix Systems...

Tableau - XML External Entity Exploit

Exploit for multiple platform in category web applications Exploit Title: Tableau XXE Google Dork: N/A Date: Reported to vendor July 2019, fix released August 2019. Exploit Author: Jarad Kopf Vendor Homepage: https://www.tableau.com/ Software Link: Tableau Desktop downloads:...

Tableau - XML External Entity

Tableau - XML External Entity Exploit Title: Tableau XXE Google Dork: N/A Date: Reported to vendor July 2019, fix released August 2019. Exploit Author: Jarad Kopf Vendor Homepage: https://www.tableau.com/ Software Link: Tableau Desktop downloads: https://www.tableau.com/products/desktop/download...

Tableau - XML External Entity

Exploit Title: Tableau XXE Google Dork: N/A Date: Reported to vendor July 2019, fix released August 2019. Exploit Author: Jarad Kopf Vendor Homepage: https://www.tableau.com/ Software Link: Tableau Desktop downloads: https://www.tableau.com/products/desktop/download Version/Products: See Tableau...

EUVD-2019-6589

Numerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to information disclosure or a DoS. This affects Tableau Server, Tableau Desktop, Tableau Reader, and Tableau Public Desktop...

CVE-2019-4513

IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 164555...

CVE-2019-4513

IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 164555...

Xxe

IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 164555...

CVE-2019-4513

IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 164555...

PT-2019-17113 · Ibm · Ibm Security Access Manager For Enterprise Single Sign-On

Name of the Vulnerable Software and Affected Versions: IBM Security Access Manager for Enterprise Single Sign-On version 8.2.2 Description: The issue allows a remote attacker to expose sensitive information or consume memory resources through an XML External Entity Injection XXE attack when...

IBM Security Access Manager for Enterprise Single-Sign On XML External Entity Injection Vulnerability

IBM Security Access Manager for Enterprise Single-Sign On is a suite of authentication and authorization management solutions for enterprise single sign-on from IBM in the United States. An XML external entity injection vulnerability exists in IBM Security Access Manager for Enterprise Single-Sig...

CVE-2019-14258

The XML-RPC subsystem in Zenoss 2.5.3 allows XXE attacks that lead to unauthenticated information disclosure via port 9988...

IBM Security Guardium Big Data Intelligence XML External Entity Injection Vulnerability

IBM Security Guardium Big Data Intelligence SonarG is a suite of big data security intelligence solutions from IBM, USA. The solution features interactive data exploration, automated connectivity analysis, and user activity analysis. An XML external entity injection vulnerability exists in IBM...

CVE-2019-4424

IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, and 19.0.0.2 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force...