484 matches found
CVE-2017-3548: Improper Restriction of XML External Entity Reference
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2016-7051: Improper Restriction of XML External Entity Reference
XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...
CVE-2015-7273: Improper Restriction of XML External Entity Reference
Dell Integrated Remote Access Controller iDRAC 7/8 before 2.21.21.21 has XXE...
CVE-2012-3489: Improper Restriction of XML External Entity Reference
The xmlparse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content tha...