WS-2019-0065

An XML eXternal Entity XXE Injection was discovered in pmml-model before version 1.4.3. A remote attacker can exploit this vulnerability by sending a request to submit malicious External Entity references within the embedded XML metadata to the target system...

Security Bulletin: Multiple vulnerabilities in pmml-model-1.2.15.jar affect IBM Application Performance Management products

Summary There are multiple vulnerabilities in pmml-model-1.2.15.jar used by IBM Application Performance Management. IBM Application Performance Management has addressed the applicable CVEs. Vulnerability Details IBM X-Force ID: 234344 DESCRIPTION: Java PMML JPMML-Model is vulnerable to an XML...

XML external entity (XXE) vulnerability

An XML eXternal Entity XXE Injection was discovered in pmml-model before version 1.4.3. A remote attacker can exploit this vulnerability by sending a request to submit malicious External Entity references within the embedded XML metadata to the target system...

GHSA-C8M9-MH38-97P9 XML external entity (XXE) vulnerability

An XML eXternal Entity XXE Injection was discovered in pmml-model before version 1.4.3. A remote attacker can exploit this vulnerability by sending a request to submit malicious External Entity references within the embedded XML metadata to the target system...

PT-2021-24412

Name of the Vulnerable Software and Affected Versions: pmml-model versions prior to 1.4.3 Description: A remote attacker can exploit an XML eXternal Entity XXE Injection by sending a request to submit malicious External Entity references within the embedded XML metadata to the target system...