GHSA-QJ27-W92H-FC9R XML external entity (XXE) vulnerability in Jenkins

XML external entity XXE vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query...

CVE-2015-1811: Improper Restriction of XML External Entity Reference

XML external entity XXE vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document...

PT-2013-2391

Name of the Vulnerable Software and Affected Versions IBM Sterling Order Management versions 8.0 through 8.0 before HF127 IBM Sterling Order Management versions 8.5 through 8.5 before HF89 IBM Sterling Order Management versions 9.0 through 9.0 before HF69 IBM Sterling Order Management versions...

CVE-2013-0505: Improper Input Validation

IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unspecified vectors...

PT-2013-1726

Name of the Vulnerable Software and Affected Versions IBM Cognos Business Intelligence BI versions 8.4.1 through 8.4.1 before IF1 IBM Cognos Business Intelligence BI versions 10.1 through 10.1 before IF2 IBM Cognos Business Intelligence BI versions 10.1.1 through 10.1.1 before IF2 IBM Cognos...

PT-2012-2808

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.7 before FP6 Description The issue allows remote authenticated users to read arbitrary XML files. Recommendations For IBM DB2 version 9.7, update to FP6 or later to resolve the issue...

CVE-2012-0713: Undefined Security Weakness

Unspecified vulnerability in the XML feature in IBM DB2 9.7 before FP6 on Linux, UNIX, and Windows allows remote authenticated users to read arbitrary XML files via unknown vectors...