ColdFusion XML External Entity Disclosure

The vulnerability of the ColdFusion software platform is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Dell EMC AppSync XML External Object Disclosure

The vulnerability of the Dell EMC AppSync data storage and protection software is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow an attacker to disclose protected information...

IBM QRadar SIEM XML External Object Access Disclosure

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information using a...

FastReport.NET XML External Object Reference SSRF

The vulnerability of the FastReport.NET report and document generation library is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to files and perform a SSRF attack...

IBM WebSphere Application Server Information Disclosure

The vulnerability of the IBM WebSphere Application Server application server is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to disclose confidential information or exploit memory resources...

Saia PG5 Controls Suite XML External Object Reference Unauthorized Access

The vulnerability of the programming software for PLCs programmable logic controllers, Saia PG5 Controls Suite, is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

Microsoft .NET Framework XML External Object Disclosure

The vulnerability of the Microsoft .NET Framework software platform is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

Apache Calcite XXE

The vulnerability of the Apache Calcite dynamic data management framework is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to perform XXE attacks using specially created XML code...

AVEVA Edge SCADA system Unauthorized Access

The vulnerability of the AVEVA Edge SCADA system is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow an attacker to trigger service failures or gain unauthorized access to confidential data...

Spring Framework Web Service Data Compromise

The vulnerability of web services in the Spring Framework is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of information...

XSSFExportToXml Unauthorized Access

The vulnerability in the XSSFExportToXml Java library for reading and writing MS Office documents using Apache POI is related to deficiencies in the restriction on XML references to external objects. Exploiting this vulnerability could allow an attacker to gain unauthorized access to read the fil...

Cisco Data Center Network Manager SOAP API Disclosure Sensitive Information

The vulnerability of the SOAP API interface of the Cisco Data Center Network Manager DCNM system is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Apache Solr RunExecutableListener Code Execution

The vulnerability in the implementation of the RunExecutableListener class of the Apache Solr search server and the Apache Lucene library for full-text searching is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability allows a malicious actor to...

Microsoft Visual Studio XML External Object Reference File Read

The vulnerability of the Microsoft Visual Studio software relates to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to read arbitrary files using a specially created XML file...

Document Sciences xPression XML External Object Reference

The vulnerability of the Document Sciences xPression enterprise automation system arises from an incorrect limitation on XML references to external objects /xFramework/services/QuickDoc.QuickDocHttpSoap11Endpoint/. Exploiting this vulnerability could allow a malicious actor to gain access to syst...

Vmware vSphere Client XML External Object Reference Information Disclosure

The vulnerability of the software for managing Vmware vSphere Client is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information by convincing users to connect to the malicious...