Lucene search
K

6 matches found

VulnCheck KEV
VulnCheck KEV
added 2026/01/27 12:0 a.m.8 views

VulnCheck KEV: CVE-2023-2806

A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function RequestInfoByXml of the component API. The manipulation leads to xml external entity reference. The associated identifier of this vulnerability is VDB-229411. NOTE: The...

8.8CVSS4.9AI score0.00984EPSS
In wildExploits1References3
BDU FSTEC
BDU FSTEC
added 2023/05/29 12:0 a.m.6 views

The vulnerability of the RequestInfoByXml function in the software interface of the API platform for collaborative work and automation of documentation processing in Weaver e-cology allows a malicious actor to gain access to read, modify, or delete data.

The vulnerability of the RequestInfoByXml function in the software interface of the API for collaborative work and automation of documentation processing in the Weaver e-cology platform is related to an incorrect limitation on XML links to external objects. Exploiting this vulnerability could all...

5.5CVSS6.3AI score0.00984EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2023/05/19 9:15 a.m.4 views

CVE-2023-2806

A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function RequestInfoByXml of the component API. The manipulation leads to xml external entity reference. The associated identifier of this vulnerability is VDB-229411. NOTE: The...

8.8CVSS5.4AI score0.00984EPSS
Exploits1References3
Prion
Prion
added 2023/05/19 9:15 a.m.17 views

Xxe

A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function RequestInfoByXml of the component API. The manipulation leads to xml external entity reference. The associated identifier of this vulnerability is VDB-229411. NOTE: The...

5.2CVSS8.5AI score0.00984EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/19 8:31 a.m.11 views

CVE-2023-2806 Weaver e-cology API RequestInfoByXml xml external entity reference

A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function RequestInfoByXml of the component API. The manipulation leads to xml external entity reference. The associated identifier of this vulnerability is VDB-229411. NOTE: The...

5.5CVSS6.8AI score0.00984EPSS
Exploits1References3
Cvelist
Cvelist
added 2023/05/19 8:31 a.m.28 views

CVE-2023-2806 Weaver e-cology API RequestInfoByXml xml external entity reference

A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function RequestInfoByXml of the component API. The manipulation leads to xml external entity reference. The associated identifier of this vulnerability is VDB-229411. NOTE: The...

5.5CVSS8.8AI score0.00984EPSS
Exploits1References3
Rows per page
Query Builder