XXE Vulnerability in Various TRS Products

WCM, Portal, infogate plug-ins, comment plug-ins, etc. developed by Topsy, widely used in the national government, enterprises and institutions portal system and plug-ins. TRS a variety of products mainly including: WCM, Portal, infogate plug-ins, comment plug-ins exist XXE entity injection...

XXE Vulnerability in Depart.asmx, a Universal Online Learning Platform for MicroXia

Micro Xia Online Learning Platform is an online education system based on B/S architecture. The product/SOPA/Depart.asmx suffers from XXE injection vulnerability, which can be exploited by an attacker to remotely read arbitrary files from the server...

XXE Vulnerability in Columns.asmx File of Microxia Online Learning Platform

Micro Xia Online Learning Platform is an online education system based on B/S architecture. A XXE vulnerability exists in the Columns.asmx file of MicroXia Online Learning Platform. An attacker can exploit the vulnerability to remotely read arbitrary files on the server...

Red Hat JBoss Enterprise Application Platform XML External Entity Injection Vulnerability

Red Hat JBoss Enterprise Application Platform EAP is the United States Red Hat Red Hat company's set of open source, J2EE-based middleware platform. The platform is mainly used to build, deploy and host Java applications and services. Red Hat JBoss EAP XML external entity injection vulnerability...

CVE-2016-6256

SAP Business One for Android 1.2.3 allows remote attackers to conduct XML External Entity XXE attacks via crafted XML data in a request to B1iXcellerator/exec/soap/vP.001sap0003.inWCSX/com.sap.b1i.vplatform.runtime/INBWSCALLSYNCXPT/INBWSCALLSYNCXPT.ipo/proc, aka SAP Security Note 2378065...

SAP Web Dynpro Flash Island XML External Entity Injection Vulnerability

SAP Web Dynpro ABAP is the SAP standard UI technology from SAP Germany for developing Web applications in the ABAP environment. It consists of a runtime environment and a graphical development environment that integrates the special Web Dynpro tools from the ABAP Workbench SE80. An XML external...

SAP Business One for Android XML External Entity Injection Vulnerability

SAP Business One for Android is a mobile application tailored for Android. An XML external entity injection vulnerability exists in SAP Business One for Android. An attacker could exploit this vulnerability to gain access to sensitive information or cause a denial of service...

Apache CXF JAX-RS XML External Entity Injection Vulnerability

Apache CXF is the United States Apache Apache Software Foundation, an open source Web services framework. Apache CXF has an XML external entity injection vulnerability. An attacker could exploit this vulnerability to gain access to sensitive information or cause a denial of service...

SUSE SLES11 Security Update : java-1_7_0-ibm (SUSE-SU-2017:1384-1)

This update for java-170-ibm fixes the following issues: Version update to 7.0-10.5 bsc1038505 - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c - CVE-2016-9842: zlib: Undefined left shift of negative number ...

IBM SDK, Java Technology EditionXML External Entity Injection Vulnerability

IBM SDK, Java Technology Edition is a set of integrated toolkits for creating, discovering, invoking and testing Web services from IBM in the United States. An XML external entity injection vulnerability exists in IBM SDK, Java Technology Edition. A remote attacker could exploit this vulnerabilit...

SAP NetWeaver XML External Entity Injection Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An XML external entity injection vulnerability exists in SAP Netweaver. An attacker could exploit this...

WebORB for Java XML External Entity Injection Vulnerability

Midnight Coders WebORB for Java is a cross-platform Midnight Coders, Inc. integration server for desktop, browser and mobile clients and the corresponding Java POJO and other components and Web services to provide a common connection to the data and media. An XML external entity injection...

SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2017:1385-1)

This update for java-171-ibm fixes the following issues : - Version update to 7.1-4.5 bsc1038505 - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c - CVE-2016-9842: zlib: Undefined left shift of negative numbe...

SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2017:1386-1)

This update for java-180-ibm fixes the following issues: Version update bsc1038505 : - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c - CVE-2016-9842: zlib: Undefined left shift of negative number -...

SUSE-SU-2017:1385-1 Security update for java-1_7_1-ibm

This update for java-171-ibm fixes the following issues: - Version update to 7.1-4.5 bsc1038505 - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c - CVE-2016-9842: zlib: Undefined left shift of negative number...

CVE-2017-8913

The Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity XXE attacks via a crafted XML document in a request to irj/servlet/prt/portal/prtroot/com.sap.visualcomposer.BIKit.default, aka SAP Security Note 2386873...

CVE-2017-8913

The Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity XXE attacks via a crafted XML document in a request to irj/servlet/prt/portal/prtroot/com.sap.visualcomposer.BIKit.default, aka SAP Security Note 2386873...

Xxe

The Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity XXE attacks via a crafted XML document in a request to irj/servlet/prt/portal/prtroot/com.sap.visualcomposer.BIKit.default, aka SAP Security Note 2386873...

CVE-2017-8913

The CVE-2017-8913 vulnerability affects SAP NetWeaver AS JAVA 7.5, specifically the Visual Composer VC70RUNTIME component. Affected files/components include VC70RUNTIME (7.30–7.50) and VCFRAMEWORK/VCFLEX7.00 as listed in public advisories. The issue is an XML External Entity (XXE) vulnerability t...

CVE-2017-8913

The Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity XXE attacks via a crafted XML document in a request to irj/servlet/prt/portal/prtroot/com.sap.visualcomposer.BIKit.default, aka SAP Security Note 2386873...