Security Bulletin: Castor Vulnerability Affects IBM Control Center (CVE-2014-3004)

Summary Castor Library could allow a remote attacker to obtain sensitive information, caused by an XML External Entity Injection XXE error when processing XML data. Vulnerability Details CVEID: CVE-2014-3004 DESCRIPTION: Castor Library could allow a remote attacker to obtain sensitive information...

Security Bulletin: IBM Security Privileged Identity Manager is affected by XML External Entity Injection vulnerability in WebSphere (CVE-2020-4949)

Summary IBM Security Privileged Identity Manager has addressed a XML External Entity Injection vulnerability in WebSphere application server. Vulnerability Details CVEID: CVE-2020-4949 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity...

ObjectPlanet Opinio 代码问题漏洞

ObjectPlanet Opinio is an online survey system from ObjectPlanet Norway. A code issue vulnerability exists in ObjectPlanet Opinio versions prior to 7.15, which stems from a program that allows XXE attacks by modifying a css file and importing this .xml file in the survey administration folder...

CVE-2021-23418

The package glances before 3.2.1 are vulnerable to XML External Entity XXE Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML attacks...

CVE-2021-23418

The package glances before 3.2.1 are vulnerable to XML External Entity XXE Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML attacks...

DEBIAN-CVE-2021-23418

The package glances before 3.2.1 are vulnerable to XML External Entity XXE Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML attacks...

CVE-2021-23418

The package glances before 3.2.1 are vulnerable to XML External Entity XXE Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML attacks...

PYSEC-2021-115

The package glances before 3.2.1 are vulnerable to XML External Entity XXE Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML attacks...

Xxe

The package glances before 3.2.1 are vulnerable to XML External Entity XXE Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML attacks...

UBUNTU-CVE-2021-23418

The package glances before 3.2.1 are vulnerable to XML External Entity XXE Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML attacks...

PYSEC-2021-115

The package glances before 3.2.1 are vulnerable to XML External Entity XXE Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML attacks...

CVE-2021-23418

CVE-2021-23418 affects Glances before 3.2.1, which is vulnerable to XML External Entity (XXE) Injection via parsing untrusted XML data. This is supported by multiple connected sources (GitHub GHSA entry and advisory references). Remediation: upgrade to Glances 3.2.1 or later. The provided documen...

CVE-2021-23418

The package glances before 3.2.1 are vulnerable to XML External Entity XXE Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML attacks...

CVE-2021-23418 XML External Entity (XXE) Injection

The package glances before 3.2.1 are vulnerable to XML External Entity XXE Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML attacks...

glances 代码问题漏洞

glances is a system monitoring tool. A security vulnerability exists in glances versions prior to 3.2.1. The vulnerability stems from the fact that package glances prior to 3.2.1 is susceptible to XML External Entity XXE injection, which parses untrusted XML data through the use of Fault...

XML External Entity (XXE) Injection in JDOM

An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. As a workaround, to avoid external entities being expanded, one can call builder.setExpandEntitiesfalse and they won't be expanded...

CVE-2021-20399

IBM Qradar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 196073...

Xxe

IBM Qradar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 196073...

CVE-2021-20399

CVE-2021-20399 affects IBM QRadar SIEM 7.3.0–7.3.3 Patch 8 and 7.4.0–7.4.3 GA, vulnerable to XML External Entity (XXE) processing of XML data. A remote attacker could expose sensitive information or exhaust memory/resources. Affected releases are addressed by IBM fixes: QRadar 7.3.3 Patch 9 and 7...

Security Bulletin: IBM QRadar SIEM is vulnerable to an XML External Entity Injection (XXE) attack (CVE-2021-20399)

Summary IBM QRadar SIEM is vulnerable to an XML External Entity Injection XXE attack when processing XML data. Vulnerability Details CVEID: CVE-2021-20399 DESCRIPTION: IBM QRadar is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit...