Lucene search
K

4 matches found

OSV
OSV
added 2026/02/10 4:16 a.m.3 views

CVE-2026-23687

SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents to the verifier. This may result in acceptance of tampered identity information, unauthorized access to sensitive...

8.8CVSS5.8AI score0.00018EPSS
Exploits1References2
Veracode
Veracode
added 2025/03/20 8:31 a.m.9 views

XML Signature Bypass

xml-crypto is vulnerable to an XML Signature Bypass. The vulnerability is due to improper validation of signed XML structures, allowing an attacker to modify a signed XML message while still passing signature verification checks...

9.3CVSS6.5AI score0.00197EPSS
Exploits1References8Affected Software1
CNNVD
CNNVD
added 2025/03/14 12:0 a.m.2 views

xml-crypto 数据伪造问题漏洞

NPM xml-crypto is a digital signature and encryption library from NPM. A security vulnerability exists in xml-crypto version 6.0.0 and earlier that stems from bypassing authentication or authorization mechanisms, allowing an attacker to modify valid signed XML messages...

9.3CVSS8.2AI score0.00197EPSS
Exploits1References10
CNNVD
CNNVD
added 2025/03/14 12:0 a.m.1 views

NPM xml-crypto 数据伪造问题漏洞

NPM xml-crypto is a digital signature and cryptography library from NPM. A security vulnerability exists in NPM xml-crypto version 6.0.0 and earlier that stems from bypassing authentication or authorization mechanisms, allowing an attacker to modify valid signed XML messages...

9.3CVSS8.2AI score0.00472EPSS
Exploits0References10
Rows per page
Query Builder