7894 matches found
Debian DLA-1299-1 : libjgraphx-java security update
It was discovered that there was a potential XML External Entity XXE attack in libjgraphx-java, a diagramming library for Java applications. For Debian 7 'Wheezy', this issue has been fixed in libjgraphx-java version 1.4.1.0-3+deb7u1. We recommend that you upgrade your libjgraphx-java packages...
[SECURITY] [DLA 1299-1] libjgraphx-java security update
Package : libjgraphx-java Version : 1.4.1.0-3+deb7u1 CVE ID : CVE-2017-18197 Debian Bug : 891796 It was discovered that there was a potential XML External Entity XXE attack in libjgraphx-java, a diagramming library for Java applications. For Debian 7 "Wheezy", this issue has been fixed in...
CVE-2017-7426
The NetIQ Identity Manager Plugins before 4.6.1 contained various XML External XML Entity XXE handling flaws that could be used by attackers to leak information or cause denial of service attacks...
CVE-2017-18197
In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert is missing flags to prevent XML External Entity XXE attacks, as demonstrated by /ServerView...
XML External Entity (XXE) Injection
mxgraph is vulnerable to XML external entity XXE injection attacks. These attacks are possible because the SAXParserFactory used doesn't prevent doc-type declarations DTD, allowing attackers to perform these attacks...
IBM Financial Transaction Manager for ACH Services for Multi-Platform XML External Entity Injection Vulnerability
IBM Financial Transaction Manager for ACH Services for Multi-Platform is a cross-platform financial transaction manager product from IBM, USA, which is used to monitor, track and report on financial payments and transactions. An XML external entity injection vulnerability exists in IBM Financial...
SAP Note Assistant XML External Entity Injection Vulnerability
SAP Note Assistant is a tool to help automate the import of changes in SAP Notes, a document created by a developer who finds a bug in an ABAP program that describes the problem and the associated program modification code. An XML external entity injection vulnerability exists in SAP Note...
IBM Forms Experience Builder XML External Entity Injection Vulnerability
IBM Forms Experience Builder is a set of U.S. IBM's Web forms for creating Web site applications. An XML external entity injection vulnerability exists in IBM Forms Experience Builder versions 8.5, 8.5.1, and 8.6. A remote attacker could exploit this vulnerability to obtain sensitive information...
SAP Business Planning and Consolidation XML External Entity Injection Vulnerability
SAP Business Planning and Consolidation is a comprehensive budget management solution from SAP. An XML external entity injection vulnerability exists in SAP Business Planning and Consolidation. An attacker could obtain sensitive information and cause a denial of service...
CVE-2017-18197
In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert is missing flags to prevent XML External Entity XXE attacks, as demonstrated by /ServerView...
Xxe
In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert is missing flags to prevent XML External Entity XXE attacks, as demonstrated by /ServerView...
UBUNTU-CVE-2017-18197
In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert is missing flags to prevent XML External Entity XXE attacks, as demonstrated by /ServerView...
CVE-2017-18197
In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert is missing flags to prevent XML External Entity XXE attacks, as demonstrated by /ServerView...
CVE-2017-18197
CVE-2017-18197 affects mxGraph (before 3.7.6). In mxGraphViewImageReader.java, the SAXParserFactory used in convert() lacks XXE-defensive flags, enabling XML External Entity attacks (as demonstrated by /ServerView). Public disclosures and advisories (GHSA-wvpv-8524-wg6x; Fed/Debian/Nessus entries...
XXE Zeroday Vulnerability in HP PPM
Intro: XXE Zeroday Vulnerability in HP PPM Researchers at Rhino Security Labs discovered an XXE vulnerability in the way HP Project and Portfolio Management Center HP PPM processed imported tickets. Specifically, an XML external entity injection vulnerability allows an attacker to exploit the...
mxgraph mxGraphViewImageReader.java file XML external entity vulnerability
mxGraph is a JavaScript charting library . A security vulnerability in the mxGraphViewImageReader.java file in versions prior to mxGraph 3.7.6 stems from a SAXParserFactory instance in the 'convert' function that lacks the user blocking XML external entity injection attacks with a status flag...
Trend Micro Email Encryption Gateway XML External Entity Injection Vulnerability
Trend Micro Email Encryption is a suite of identity-based email encryption solutions from Trend Micro, Inc. The Trend Micro Email Encryption Gateway TMEEG is one of the gateway products that provides data protection. An XML external entity injection vulnerability exists in the configuration scrip...
Xxe
XML External Entity XXE vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability can be exploited to allow XML External Entity XXE...