Lucene search
K

13 matches found

BDU FSTEC
BDU FSTEC
added 2025/07/23 12:0 a.m.1 views

The vulnerability of the FastReport.NET report and document generation library lies in the improper limitation of XML references to external objects. This allows attackers to gain unauthorized access to files and perform SSRF attacks.

The vulnerability of the FastReport.NET report and document generation library is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to files and perform a SSRF attack...

9.3CVSS5.5AI score
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/18 12:0 a.m.1 views

The vulnerability of the IBM WebSphere Application Server application server relates to incorrect restrictions on XML references to external objects, which allows attackers to expose confidential information or exploit memory resources.

The vulnerability of the IBM WebSphere Application Server application server is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to disclose confidential information or exploit memory resources...

7.5CVSS5.5AI score0.00038EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/27 12:0 a.m.1 views

The vulnerability of the programming software for PLCs (programmable logic controllers), namely the Saia PG5 Controls Suite, arises from incorrect restrictions on XML references to external objects. This vulnerability allows attackers to gain unauthorized access to protected information.

The vulnerability of the programming software for PLCs programmable logic controllers, Saia PG5 Controls Suite, is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.00112EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/10/12 12:0 a.m.1 views

The vulnerability of the Microsoft .NET Framework software lies in the improper limitation of XML references to external objects, which allows attackers to access confidential information.

The vulnerability of the Microsoft .NET Framework software platform is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

5.9CVSS6.8AI score0.00762EPSS
Exploits0References4Affected Software8
BDU FSTEC
BDU FSTEC
added 2022/12/09 12:0 a.m.1 views

The vulnerability of the dynamic data management framework Apache Calcite, related to incorrect restrictions on XML links to external objects, allows attackers to perform XXE attacks.

The vulnerability of the Apache Calcite dynamic data management framework is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to perform XXE attacks using specially created XML code...

10CVSS6.9AI score0.00102EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/22 12:0 a.m.1 views

The vulnerability of the AVEVA Edge SCADA system, related to incorrect restrictions on XML references to external objects, allows a intruder to trigger a service failure or gain unauthorized access to confidential data.

The vulnerability of the AVEVA Edge SCADA system is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow an attacker to trigger service failures or gain unauthorized access to confidential data...

6.6CVSS5.5AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2021/02/16 12:0 a.m.1 views

The vulnerability of web services in the Spring Framework software platform allows attackers to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of web services in the Spring Framework is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of information...

10CVSS0.00305EPSS
Exploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/03/12 12:0 a.m.0 views

The vulnerability relates to the XSSFExportToXml Java library for reading and writing MS Office documents using Apache POI. It allows an attacker to gain unauthorized access to read these files.

The vulnerability in the XSSFExportToXml Java library for reading and writing MS Office documents using Apache POI is related to deficiencies in the restriction on XML references to external objects. Exploiting this vulnerability could allow an attacker to gain unauthorized access to read the fil...

5.5CVSS0.00033EPSS
Exploits0References10Affected Software23
BDU FSTEC
BDU FSTEC
added 2020/02/03 12:0 a.m.0 views

The vulnerability of the SOAP API interface of the Cisco Data Center Network Manager system allows a attacker to disclose sensitive information.

The vulnerability of the SOAP API interface of the Cisco Data Center Network Manager DCNM system is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

6.8CVSS0.00774EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/11/18 12:0 a.m.0 views

The vulnerability of the implementation of the RunExecutableListener class in the Apache Solr search server and the Apache Lucene library for full-text searching allows a perpetrator to execute arbitrary code.

The vulnerability in the implementation of the RunExecutableListener class of the Apache Solr search server and the Apache Lucene library for full-text searching is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability allows a malicious actor to...

9.8CVSS0.93891EPSS
Exploits11References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/07/23 12:0 a.m.0 views

The vulnerability of the Microsoft Visual Studio software development tool lies in the incorrect limitation on XML references to external objects, which allows attackers to read arbitrary files.

The vulnerability of the Microsoft Visual Studio software relates to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to read arbitrary files using a specially created XML file...

7.8CVSS5.6AI score0.25343EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2017/11/03 12:0 a.m.2 views

The vulnerability of the Document Sciences xPression enterprise automation system arises from incorrect restrictions on XML references to external objects. This allows attackers to gain access to system files, perform SRF attacks, or cause service failures.

The vulnerability of the Document Sciences xPression enterprise automation system arises from an incorrect limitation on XML references to external objects /xFramework/services/QuickDoc.QuickDocHttpSoap11Endpoint/. Exploiting this vulnerability could allow a malicious actor to gain access to syst...

9.8CVSS7.8AI score0.00464EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2017/10/05 12:0 a.m.1 views

The vulnerability of the software for managing Vmware vSphere Client lies in the improper limitation of XML references to external objects, which allows an attacker to access confidential information.

The vulnerability of the software for managing Vmware vSphere Client is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information by convincing users to connect to the malicious...

4.3CVSS6.5AI score0.00449EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder