Lucene search
K

6 matches found

BDU FSTEC
BDU FSTEC
added 2021/10/22 12:0 a.m.1 views

The vulnerability of the “ASSaD-ID” biometrics system’s software lies in the improper restriction on XML links to external objects, which allows a perpetrator to carry out an SSRF attack.

The vulnerability of the “ASSaD-ID” biometrics system’s software is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack and execute arbitrary code within the system...

9.8CVSS6AI score
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/01 12:0 a.m.1 views

The vulnerability of the WebReports server lies in the improper limitation of XML links to external objects. This allows attackers to disclose protected information or cause service failures.

The vulnerability of the WebReports report server is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

9CVSS0.00466EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/08/30 12:0 a.m.0 views

The vulnerability of the XmlLite.dll library in the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the XmlLite.dll library in the Windows operating system is related to errors in restricting XML links to external objects. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted requests...

7.8CVSS5.5AI score0.02416EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2018/12/27 12:0 a.m.2 views

The vulnerability of the IBM QRadar SIEM system’s event collection and analysis process is related to improper restrictions on XML links to external objects. This allows attackers to disclose sensitive information or exploit memory resources.

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to disclose protected information or utilize memory resources...

7.5CVSS7.1AI score0.00359EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2018/02/02 12:0 a.m.1 views

The vulnerability of the Apache XML-RPC library (ws-xmlrpc) is related to improper restrictions on XML links to external objects, which allows attackers to perform SSRF attacks.

The vulnerability of the Apache XML-RPC library ws-xmlrpc is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to perform SSRF attacks using specially crafted DTDs...

9.3CVSS7.8AI score0.0353EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/23 12:0 a.m.4 views

The vulnerability of the application interface of IBM WebSphere Portal servers allows a hacker to trigger a service failure or read arbitrary files.

The vulnerability of the XML parser in the IBM WebSphere Portal user interface relates to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to read arbitrary files or cause service failures by declaring external links that are related ...

5.5CVSS0.0031EPSS
Exploits0References3
Rows per page
Query Builder