CVE-2018-5758

The Upload File functionality in upload.jspa in Aurea Jive Jive-n 9.0.2.1 On-Premises allows for an XML External Entity attack through a crafted file, allowing attackers to read arbitrary files...

CVE-2018-5758

The Upload File functionality in upload.jspa in Aurea Jive Jive-n 9.0.2.1 On-Premises allows for an XML External Entity attack through a crafted file, allowing attackers to read arbitrary files...

CVE-2018-5758

Summary: CVE-2018-5758 affects Aurea Jive Jive-n 9.0.2.1 On-Premises. The vulnerability arises in the Upload File functionality (upload.jspa), enabling an XML External Entity (XXE) attack via a crafted file to read arbitrary files. The provided sources consistently describe the flaw as an XXE in ...

Cisco Secure Access Control Server XML External Entity Injection Vulnerability (CNVD-2018-05230)

Cisco Secure Access Control Server ACS is a secure access control server from Cisco USA. The server provides a comprehensive identity-based access control solution for Cisco intelligent information networks. An XML external entity injection vulnerability exists in the Web-based user interface in...

Xxe

A XML external entity XXE vulnerability exists in the import.cgi of the web interface component of the Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67...

CVE-2018-7230

A XML external entity XXE vulnerability exists in the import.cgi of the web interface component of the Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67...

CVE-2018-7230

A XML external entity XXE vulnerability exists in the import.cgi of the web interface component of the Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67...

CVE-2018-7230

A XML external entity XXE vulnerability exists in the import.cgi of the web interface component of the Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67...

Xxe

XML external entity XXE vulnerability in IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager FTM for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager FTM fo...

CVE-2016-0268

XML external entity XXE vulnerability in IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager FTM for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager FTM fo...

XML External Entity Injection in Jive-n (CVE-2018-5758)

The post XML External Entity Injection in Jive-n CVE-2018-5758 appeared first on Rhino Security Labs...

Debian DLA-1299-1 : libjgraphx-java security update

It was discovered that there was a potential XML External Entity XXE attack in libjgraphx-java, a diagramming library for Java applications. For Debian 7 'Wheezy', this issue has been fixed in libjgraphx-java version 1.4.1.0-3+deb7u1. We recommend that you upgrade your libjgraphx-java packages...

[SECURITY] [DLA 1299-1] libjgraphx-java security update

Package : libjgraphx-java Version : 1.4.1.0-3+deb7u1 CVE ID : CVE-2017-18197 Debian Bug : 891796 It was discovered that there was a potential XML External Entity XXE attack in libjgraphx-java, a diagramming library for Java applications. For Debian 7 "Wheezy", this issue has been fixed in...

CVE-2017-7426

The NetIQ Identity Manager Plugins before 4.6.1 contained various XML External XML Entity XXE handling flaws that could be used by attackers to leak information or cause denial of service attacks...

CVE-2017-18197

In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert is missing flags to prevent XML External Entity XXE attacks, as demonstrated by /ServerView...

XML External Entity (XXE) Injection

mxgraph is vulnerable to XML external entity XXE injection attacks. These attacks are possible because the SAXParserFactory used doesn't prevent doc-type declarations DTD, allowing attackers to perform these attacks...

IBM Financial Transaction Manager for ACH Services for Multi-Platform XML External Entity Injection Vulnerability

IBM Financial Transaction Manager for ACH Services for Multi-Platform is a cross-platform financial transaction manager product from IBM, USA, which is used to monitor, track and report on financial payments and transactions. An XML external entity injection vulnerability exists in IBM Financial...

SAP Note Assistant XML External Entity Injection Vulnerability

SAP Note Assistant is a tool to help automate the import of changes in SAP Notes, a document created by a developer who finds a bug in an ABAP program that describes the problem and the associated program modification code. An XML external entity injection vulnerability exists in SAP Note...

IBM Forms Experience Builder XML External Entity Injection Vulnerability

IBM Forms Experience Builder is a set of U.S. IBM's Web forms for creating Web site applications. An XML external entity injection vulnerability exists in IBM Forms Experience Builder versions 8.5, 8.5.1, and 8.6. A remote attacker could exploit this vulnerability to obtain sensitive information...

SAP Business Planning and Consolidation XML External Entity Injection Vulnerability

SAP Business Planning and Consolidation is a comprehensive budget management solution from SAP. An XML external entity injection vulnerability exists in SAP Business Planning and Consolidation. An attacker could obtain sensitive information and cause a denial of service...