9931 matches found
CVE-2018-7230
A XML external entity XXE vulnerability exists in the import.cgi of the web interface component of the Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67...
CVE-2018-7230
A XML external entity XXE vulnerability exists in the import.cgi of the web interface component of the Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67...
CVE-2016-0268
XML external entity XXE vulnerability in IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager FTM for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager FTM fo...
Xxe
XML external entity XXE vulnerability in IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager FTM for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager FTM fo...
Cisco Secure Access Control Server XML External Entity Injection Vulnerability
The Cisco Secure Access Control Server provides a comprehensive identity-based access control solution for Cisco intelligent information networks. An XML external entity injection vulnerability exists in the web-based user interface of Cisco Secure Access Control Server. The vulnerability occurs...
XML External Entity Injection in Jive-n (CVE-2018-5758)
The post XML External Entity Injection in Jive-n CVE-2018-5758 appeared first on Rhino Security Labs...
Debian DLA-1299-1 : libjgraphx-java security update
It was discovered that there was a potential XML External Entity XXE attack in libjgraphx-java, a diagramming library for Java applications. For Debian 7 'Wheezy', this issue has been fixed in libjgraphx-java version 1.4.1.0-3+deb7u1. We recommend that you upgrade your libjgraphx-java packages...
[SECURITY] [DLA 1299-1] libjgraphx-java security update
Package : libjgraphx-java Version : 1.4.1.0-3+deb7u1 CVE ID : CVE-2017-18197 Debian Bug : 891796 It was discovered that there was a potential XML External Entity XXE attack in libjgraphx-java, a diagramming library for Java applications. For Debian 7 "Wheezy", this issue has been fixed in...
CVE-2017-7426
The NetIQ Identity Manager Plugins before 4.6.1 contained various XML External XML Entity XXE handling flaws that could be used by attackers to leak information or cause denial of service attacks...
CVE-2017-7426
The NetIQ Identity Manager Plugins before 4.6.1 contained various XML External XML Entity XXE handling flaws that could be used by attackers to leak information or cause denial of service attacks...
CVE-2017-7426 iManager - XML External Entity vulnerabilities
The NetIQ Identity Manager Plugins before 4.6.1 contained various XML External XML Entity XXE handling flaws that could be used by attackers to leak information or cause denial of service attacks...
CVE-2017-18197
In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert is missing flags to prevent XML External Entity XXE attacks, as demonstrated by /ServerView...
Micro Focus Project and Portfolio Management Center XML External Entity Injection Vulnerability
Micro Focus Project and Portfolio Management Center is a suite of project portfolio management software from Micro Focus UK. The software manages hybrid projects by integrating agile tools such as ALM Octane, Agile Manager and CA Rally. An XML external entity injection vulnerability exists in Mic...
XML External Entity (XXE) Injection
mxgraph is vulnerable to XML external entity XXE injection attacks. These attacks are possible because the SAXParserFactory used doesn't prevent doc-type declarations DTD, allowing attackers to perform these attacks...
IBM Financial Transaction Manager for ACH Services for Multi-Platform XML External Entity Injection Vulnerability
IBM Financial Transaction Manager for ACH Services for Multi-Platform is a cross-platform financial transaction manager product from IBM, USA, which is used to monitor, track and report on financial payments and transactions. An XML external entity injection vulnerability exists in IBM Financial...
SAP Note Assistant XML External Entity Injection Vulnerability
SAP Note Assistant is a tool to help automate the import of changes in SAP Notes, a document created by a developer who finds a bug in an ABAP program that describes the problem and the associated program modification code. An XML external entity injection vulnerability exists in SAP Note...
SAP Business Planning and Consolidation XML External Entity Injection Vulnerability
SAP Business Planning and Consolidation is a comprehensive budget management solution from SAP. An XML external entity injection vulnerability exists in SAP Business Planning and Consolidation. An attacker could obtain sensitive information and cause a denial of service...
IBM Forms Experience Builder XML External Entity Injection Vulnerability
IBM Forms Experience Builder is a set of U.S. IBM's Web forms for creating Web site applications. An XML external entity injection vulnerability exists in IBM Forms Experience Builder versions 8.5, 8.5.1, and 8.6. A remote attacker could exploit this vulnerability to obtain sensitive information...