XXE Vulnerability in Employee.asmx File of Microxia Online Learning Platform

Micro Xia Online Learning Platform is an online education system based on B/S architecture. XXE vulnerability exists in the Employee.asmx file of MicroXia Online Learning Platform, which can be exploited by an attacker to remotely read arbitrary files on the server...

SAP NetWeaver XML External Entity Injection Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An XML external entity injection vulnerability exists in SAP Netweaver. An attacker could exploit this...

RESTEasy XML External Entity Injection Vulnerability

RESTEasy is the United States Red Hat Red Hat, Inc. of a JBoss open source project , which provides a variety of frameworks for building RESTful Web Services and RESTful Java applications . RESTEasy has an XML external entity injection vulnerability. An attacker could exploit this vulnerability t...

SAP Web Dynpro Flash Island XML External Entity Injection Vulnerability

SAP Web Dynpro ABAP is the SAP standard UI technology from SAP Germany for developing Web applications in the ABAP environment. It consists of a runtime environment and a graphical development environment that integrates the special Web Dynpro tools from the ABAP Workbench SE80. An XML external...

SAP Composite Application Framework Authorization Tool XML External Entity Injection Vulnerability

SAP Composite Application Framework is the German SAP SAP company integrated SAP NetWeaver to create composite applications for the software. An XML external entity injection vulnerability exists in the SAP Composite Application Framework Authorization Tool. An attacker could exploit this...

IBM SDK, Java Technology EditionXML External Entity Injection Vulnerability

IBM SDK, Java Technology Edition is a set of integrated toolkits for creating, discovering, invoking and testing Web services from IBM in the United States. An XML external entity injection vulnerability exists in IBM SDK, Java Technology Edition. A remote attacker could exploit this vulnerabilit...

Apache CXF JAX-RS XML External Entity Injection Vulnerability

Apache CXF is the United States Apache Apache Software Foundation, an open source Web services framework. Apache CXF has an XML external entity injection vulnerability. An attacker could exploit this vulnerability to gain access to sensitive information or cause a denial of service...

SAP TranslationSupport Application XML External Entity Injection Vulnerability

SAP TranslationSupport Application is software from SAP Germany. An XML external entity injection vulnerability exists in the SAP TranslationSupport application. An attacker could exploit this vulnerability to gain access to sensitive information or cause a denial of service...

Exadel Flamingo XML External Entity Injection Vulnerability

Exadel Flamingo is a set of tools for bootstrapping RIA applications built with a Java backend. An XML external entity injection vulnerability exists in Exadel Flamingo version 2.2.0. An attacker could exploit this vulnerability to obtain sensitive information or cause a denial of service...

WebORB for Java XML External Entity Injection Vulnerability

Midnight Coders WebORB for Java is a cross-platform Midnight Coders, Inc. integration server for desktop, browser and mobile clients and the corresponding Java POJO and other components and Web services to provide a common connection to the data and media. An XML external entity injection...

SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2017:1386-1)

This update for java-180-ibm fixes the following issues: Version update bsc1038505 : - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c - CVE-2016-9842: zlib: Undefined left shift of negative number -...

SUSE SLES11 Security Update : java-1_7_0-ibm (SUSE-SU-2017:1384-1)

This update for java-170-ibm fixes the following issues: Version update to 7.0-10.5 bsc1038505 - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c - CVE-2016-9842: zlib: Undefined left shift of negative number ...

SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2017:1385-1)

This update for java-171-ibm fixes the following issues : - Version update to 7.1-4.5 bsc1038505 - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c - CVE-2016-9842: zlib: Undefined left shift of negative numbe...

SAP Business One for Android XML External Entity Injection Vulnerability

SAP Business One for Android is a mobile application tailored for Android. An XML external entity injection vulnerability exists in SAP Business One for Android. An attacker could exploit this vulnerability to gain access to sensitive information or cause a denial of service...

SUSE-SU-2017:1385-1 Security update for java-1_7_1-ibm

This update for java-171-ibm fixes the following issues: - Version update to 7.1-4.5 bsc1038505 - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c - CVE-2016-9842: zlib: Undefined left shift of negative number...

CVE-2017-8913

The Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity XXE attacks via a crafted XML document in a request to irj/servlet/prt/portal/prtroot/com.sap.visualcomposer.BIKit.default, aka SAP Security Note 2386873...

CVE-2017-8913

The Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity XXE attacks via a crafted XML document in a request to irj/servlet/prt/portal/prtroot/com.sap.visualcomposer.BIKit.default, aka SAP Security Note 2386873...

Xxe

The Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity XXE attacks via a crafted XML document in a request to irj/servlet/prt/portal/prtroot/com.sap.visualcomposer.BIKit.default, aka SAP Security Note 2386873...

CVE-2017-8913

The Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity XXE attacks via a crafted XML document in a request to irj/servlet/prt/portal/prtroot/com.sap.visualcomposer.BIKit.default, aka SAP Security Note 2386873...

CVE-2017-8913

The CVE-2017-8913 vulnerability affects SAP NetWeaver AS JAVA 7.5, specifically the Visual Composer VC70RUNTIME component. Affected files/components include VC70RUNTIME (7.30–7.50) and VCFRAMEWORK/VCFLEX7.00 as listed in public advisories. The issue is an XML External Entity (XXE) vulnerability t...