Pentaho Data Integration XXE

The vulnerability of the programming tool for data integration and analysis in Hitachi Vantara Pentaho Data Integration & Analytics relates to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to perform XXE attacks remotely...

IBM Financial Transaction Manager SWIFT Disclosure Information

The vulnerability of the software tool for processing and managing financial transactions conducted through the SWIFT messaging system is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to disclose protected...