Trimble / Manhattan Software IWMS 9.x XXE Injection

https://www.osisecurity.com.au/manhattan-software-iwms-integrated-workplace-management-system-xml-external-entity-xxe-injection-file-disclosure.html Date: 04-Apr-2017 Product: Trimble / Manhattan Software IWMS integrated workplace management system Versions affected: 9.x Vulnerability: XML Extern...

CVE-2016-6111

IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources...

Xxe

IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources...

Xxe

IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference : 2000784...

CVE-2016-6111

IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources...

CVE-2016-9707

IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference : 2000784...

XML External Entity

An XML External Entity attack is a type of attack against an application that parses XML input. This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. This attack may lead to the disclosure of confidential data, denial of...

CVE-2016-9924

Zimbra Collaboration Suite ZCS before 8.7.4 allows remote attackers to conduct XML External Entity XXE attacks...

CVE-2016-9924

Zimbra Collaboration Suite ZCS before 8.7.4 allows remote attackers to conduct XML External Entity XXE attacks...

CVE-2016-9924

The CVE-2016-9924 issue affects Zimbra Collaboration Suite (ZCS) prior to 8.7.4, where XML External Entity (XXE) processing could be abused by remote attackers. The root cause is insecure XXE handling within ZCS’s XML processing, enabling an attacker to exploit XXE to disclose sensitive informati...

CVE-2016-9924

Zimbra Collaboration Suite ZCS before 8.7.4 allows remote attackers to conduct XML External Entity XXE attacks...

python-pysaml2 XML External Entity Injection Vulnerability (CNVD-2017-05308)

PySAML2 is an implementation of SAML2 written in python. An XML external entity injection vulnerability exists in PySAML2 4.4.0 and earlier versions. A remote attacker can exploit this vulnerability to read arbitrary files by sending a specially crafted SAMPL XML request or response...

Zimbra Collaboration Suite XML External Entity Injection Vulnerability

Zimbra Collaboration is a suite of email and collaboration solutions from Zimbra USA. The solution offers email, contacts, calendaring, file sharing, social networking, and more. An XML external entity injection vulnerability exists in Zimbra Collaboration Suite. An attacker could exploit this...

JIRA Server XML External Entity Injection and Code Execution Vulnerabilities

JIRA Server is a software developed by Atlassian Corporation for managing projects. JIRA Server suffers from an XML external entity injection vulnerability and an arbitrary code execution vulnerability. An attacker can exploit the vulnerabilities to execute arbitrary code, gain access to sensitiv...

PYSEC-2017-25

XML External Entity XXE vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a crafted SAML XML request or response...

CVE-2017-6895

USB Pratirodh allows remote attackers to conduct XML External Entity XXE attacks via XML data in usb.xml...

CVE-2017-6895

USB Pratirodh allows remote attackers to conduct XML External Entity XXE attacks via XML data in usb.xml...

CVE-2016-5749

NetIQ Access Manager 4.1 before 4.1.2 HF 1 and 4.2 before 4.2.2 was parsing incoming SAML requests with external entity resolution enabled, which could lead to local file disclosure via an XML External Entity XXE attack...

CVE-2016-5749

NetIQ Access Manager 4.1 before 4.1.2 HF 1 and 4.2 before 4.2.2 was parsing incoming SAML requests with external entity resolution enabled, which could lead to local file disclosure via an XML External Entity XXE attack...

Xxe

NetIQ Access Manager 4.1 before 4.1.2 HF 1 and 4.2 before 4.2.2 was parsing incoming SAML requests with external entity resolution enabled, which could lead to local file disclosure via an XML External Entity XXE attack...