Lucene search
K

17 matches found

BDU FSTEC
BDU FSTEC
added 2025/07/21 12:0 a.m.1 views

The vulnerability of the ColdFusion software platform lies in the improper limitation of XML references to external objects. This allows attackers to gain unauthorized access to protected information or circumvent existing security restrictions, thereby causing service failures.

The vulnerability of the ColdFusion software platform is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or circumvent existing security...

9.3CVSS5.5AI score0.00151EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/09/18 12:0 a.m.0 views

The vulnerability of the libxml2 library stems from an improper limitation on XML references to external objects, which allows attackers to gain access to arbitrary files on the server or perform network scanning of internal and external infrastructure.

The vulnerability of the libxml2 library is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to gain access to arbitrary files on the server or perform network scanning of internal and external infrastructure...

9.4CVSS0.00553EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/22 12:0 a.m.0 views

The vulnerability of the Apache Ivy package manager is related to incorrect restrictions on XML references to external objects. This allows attackers to disclose sensitive information or cause service failures.

The vulnerability of the Apache Ivy package manager is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...

8.5CVSS0.00164EPSS
Exploits0References4Affected Software12
BDU FSTEC
BDU FSTEC
added 2024/02/28 12:0 a.m.0 views

The vulnerability of the codehaus-plexus framework of Apache Maven is related to an incorrect restriction on XML references to external objects, which allows a hacker to execute arbitrary code.

The vulnerability of the codehaus-plexus framework of Apache Maven is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

4.3CVSS0.00347EPSS
Exploits0References7Affected Software20
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:0 a.m.0 views

The vulnerability of the VBASE Automation Base software platform, related to incorrect restrictions on XML references to external objects, allows attackers to trigger service failures or gain unauthorized access to confidential data.

The vulnerability of the VBASE Automation Base software platform relates to incorrect restrictions on XML references pointing to external objects. Exploiting this vulnerability can allow attackers to cause service failures or gain unauthorized access to confidential data...

5.5CVSS0.00323EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/15 12:0 a.m.1 views

The vulnerability of the ColdFusion software platform arises from an incorrect limitation on the path to the restricted access directory. This allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information...

7.8CVSS0.01577EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/05/17 12:0 a.m.0 views

The vulnerability of the software import function of Cisco Enterprise NFV Infrastructure Software (NFVIS) allows a hacker to disclose protected information.

The vulnerability of the Cisco Enterprise NFV Infrastructure Software’s software import function NFVIS is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information using specially created...

7.8CVSS0.00388EPSS
Exploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:0 a.m.0 views

The vulnerability of the BI Publisher Security component of the Oracle BI Publisher reporting tool allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the BI Publisher Security component of the Oracle BI Publisher reporting tool is related to a deficiency in the restriction on XML references to external objects during the processing of ReportTemplateService parameters. Exploiting this vulnerability can allow an attacker to...

7.8CVSS0.04326EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/20 12:0 a.m.0 views

The vulnerability of the Ruby interpreter lies in the improper limitation of XML references to external objects, which allows attackers to compromise the integrity of data.

The vulnerability of the Ruby interpreter is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of data...

7.5CVSS0.00576EPSS
Exploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/08/12 12:0 a.m.0 views

The vulnerability of the PAN-OS operating system management service in Palo Alto Networks Panorama’s centralized network interface controller system allows a hacker to read arbitrary files.

The vulnerability of the PAN-OS operating system’s centralized network interface controller in Palo Alto Networks Panorama is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to read arbitrary files remotely...

7.8CVSS0.03507EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/19 12:0 a.m.1 views

The vulnerability of the Microsoft XML Core Services MSXML on the Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft XML Core Services MSXML in the Windows operating system is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote...

9.3CVSS8.1AI score0.25795EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2019/03/22 12:0 a.m.0 views

The vulnerability of the Microsoft XML Core Services on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft XML Core Services on the Windows operating system is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote...

7.5CVSS8.4AI score0.30837EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2018/10/30 12:0 a.m.0 views

The vulnerability of the XML file analyzer in the libxml2 library allows a hacker to trigger a service failure.

The vulnerability of the XML file analyzer in the libxml2 library arises from insufficient restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to cause service failures using a specially crafted XML document...

7.8CVSS7.2AI score0.02045EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2018/10/16 12:0 a.m.0 views

The vulnerability of the PI Studio XML development tool analyzer arises from incorrect restrictions on XML references to external objects, allowing attackers to disclose protected information.

The vulnerability of the PI Studio XML analysis tool arises from an incorrect limitation on XML references to external objects. Operating this tool may allow a malicious actor to disclose protected information...

5.4CVSS5.5AI score0.00265EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2016/09/07 12:0 a.m.0 views

The vulnerability of the ColdFusion interpreter allows attackers to read arbitrary files or send TCP requests to servers in the internal network.

The vulnerability of the Office Open XML OOXML file format in ColdFusion is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows an attacker to remotely read arbitrary files or send TCP requests to internal server networks using a specially...

6.4CVSS7.7AI score0.55384EPSS
Exploits7References3
BDU FSTEC
BDU FSTEC
added 2016/05/05 12:0 a.m.2 views

The vulnerability of the SAP NetWeaver software integration platform allows a perpetrator to trigger a service failure.

The vulnerability of the UDDI component in the SAP NetWeaver software integration platform is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created XML request...

9CVSS0.06906EPSS
Exploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/11 12:0 a.m.1 views

The vulnerability of the SAP Mobile Platform, a platform for developing mobile applications, allows a hacker to read arbitrary files.

The vulnerability of the SAP Mobile Platform for developing mobile applications is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to read arbitrary files using a specially created XML request...

7.5CVSS0.00957EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder