Lucene search
+L

474 matches found

Cvelist
Cvelist
•added 2022/07/19 9:08 p.m.•39 views

CVE-2022-21562

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Fabric Layer. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite...

7.5CVSS7.5AI score0.00814EPSS
SaveExploits0References1
CVE
CVE
•added 2022/07/19 9:08 p.m.•80 views

CVE-2022-21562

CVE-2022-21562 affects Oracle Fusion Middleware’s Oracle SOA Suite (Fabric Layer). Affected are 12.2.1.3.0 and 12.2.1.4.0. The vulnerability enables unauthenticated network access over HTTP to compromise the SOA Suite, potentially allowing unauthorized creation, deletion or modification of data a...

7.5CVSS7.3AI score0.00814EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/07/19 12:00 a.m.•3 views

PT-2022-4003

Name of the Vulnerable Software and Affected Versions Oracle SOA Suite versions 12.2.1.3.0 through 12.2.1.4.0 Description The issue is related to insufficient input validation in the Fabric Layer component of Oracle SOA Suite, allowing an unauthenticated attacker with network access via HTTP to...

7.8CVSS0.00814EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/19 12:00 a.m.•4 views

CVE-2022-21562: Undefined Security Weakness

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Fabric Layer. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite...

7.5CVSS7AI score0.00814EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/05/20 12:00 a.m.•52 views

IBM DataPower Gateway has an unspecified vulnerability

IBM DataPower Gateway is a set of security and integration platforms from IBM USA designed specifically for mobile, cloud, application programming interface API, web, service-oriented architecture SOA, B2B and cloud workloads. The platform protects, integrates, and optimizes access across channel...

7.5CVSS1.6AI score0.01521EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/05/17 12:00 a.m.•59 views

IBM MQ for HPE NonStop Information Disclosure Vulnerability

IBM MQ IBM WebSphere MQ is a messaging middleware product from IBM. The product is mainly for the service-oriented architecture SOA to provide a reliable and proven messaging backbone. An information disclosure vulnerability exists in IBM MQ for HPE NonStop version 8.1.0, which can be exploited b...

5.5CVSS5AI score0.0023EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2022/03/26 12:00 a.m.•52 views

Improper Restriction of XML External Entity Reference in soa-model

Soa-model is a toolkit and Java API for WSDL, WADL and XML Schema. An XML External Entity XXE vulnerability exists in versions of soa-model prior to 1.6.4 in the WSDLParser function. This issue has been fixed in version 1.6.4...

9.8CVSS3.9AI score0.01926EPSS
SaveExploits1References6Affected Software2
OSV
OSV
•added 2022/03/26 12:00 a.m.•43 views

GHSA-PV39-QP28-4MGH Improper Restriction of XML External Entity Reference in soa-model

Soa-model is a toolkit and Java API for WSDL, WADL and XML Schema. An XML External Entity XXE vulnerability exists in versions of soa-model prior to 1.6.4 in the WSDLParser function. This issue has been fixed in version 1.6.4...

9.8CVSS9.5AI score0.01926EPSS
SaveExploits1References6
NVD
NVD
•added 2022/03/25 4:15 p.m.•15 views

CVE-2021-43090

An XML External Entity XXE vulnerability exists in soa-model before 1.6.4 in the WSDLParser function...

9.8CVSS0.01926EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2022/03/25 4:15 p.m.•10 views

CVE-2021-43090

An XML External Entity XXE vulnerability exists in soa-model before 1.6.4 in the WSDLParser function...

9.8CVSS7.3AI score0.01926EPSS
SaveExploits1References5
OSV
OSV
•added 2022/03/25 4:15 p.m.•27 views

CVE-2021-43090

An XML External Entity XXE vulnerability exists in soa-model before 1.6.4 in the WSDLParser function...

9.8CVSS9.5AI score
SaveExploits0References4
Prion
Prion
•added 2022/03/25 4:15 p.m.•25 views

Xxe

An XML External Entity XXE vulnerability exists in soa-model before 1.6.4 in the WSDLParser function...

7.5CVSS9.4AI score0.01926EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2022/03/25 3:47 p.m.•51 views

CVE-2021-43090

An XML External Entity XXE vulnerability exists in soa-model before 1.6.4 in the WSDLParser function...

9.7AI score0.01926EPSS
SaveExploits1References4
CVE
CVE
•added 2022/03/25 3:47 p.m.•115 views

CVE-2021-43090

CVE-2021-43090 describes an XML External Entity (XXE) vulnerability in the Membrane soa-model library (WSDLParser) affecting versions before 1.6.4. The issue arises from XXE handling in the WSDLParser function, with a fix released in 1.6.4. Public references include a GitHub release/commit path s...

9.8CVSS9.4AI score0.01926EPSS
SaveExploits1References4Affected Software1
Mend
Mend
•added 2022/03/25 3:47 p.m.•0 views

CVE-2021-43090

An XML External Entity XXE vulnerability exists in soa-model before 1.6.4 in the WSDLParser function...

9.8CVSS0.01926EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2022/03/25 12:00 a.m.•14 views

Membrane SOA Model 代码问题漏洞

Membrane SOA Model is an open source toolkit and Java API for WSDL and XML Schema. A code issue vulnerability exists in all versions of Membrane SOA Model that stems from an XML External Entity XXE: XML External Entity vulnerability in the WSDLParser method...

9.8CVSS8.4AI score0.01926EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2022/03/25 12:00 a.m.•3 views

PT-2022-11776

Name of the Vulnerable Software and Affected Versions soa-model versions prior to 1.6.4 Description An XML External Entity XXE vulnerability exists in the WSDLParser function. This issue affects the soa-model toolkit and Java API for WSDL, WADL, and XML Schema. The vulnerability has been fixed in...

9.8CVSS5.7AI score0.01926EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/25 12:00 a.m.•15 views

CVE-2021-43090: Improper Restriction of XML External Entity Reference

An XML External Entity XXE vulnerability exists in soa-model before 1.6.4 in the WSDLParser function...

9.8CVSS8.2AI score0.01926EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•27 views

Mageia: Security Advisory (MGASA-2021-0275)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.5AI score0.05989EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/11/09 6:09 p.m.•13 views

bind: Broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly

Incremental zone transfers IXFR provide a way of transferring changed portions of a zone between servers. An IXFR stream containing SOA records with an owner name other than the transferred zone's apex may cause the receiving named server to inadvertently remove the SOA record for the zone in...

6.5CVSS7.2AI score0.05989EPSS
SaveExploits0References5
Rows per page
Query Builder