CVE-2013-4002

CVE-2013-4002 affects the Xerces2 Java XML parser. XMLScanner.java in Xerces2 Java Parser before 2.12.0 (as used in various JREs and Oracle/Jakarta distributions) could allow remote denial of service via vectors related to XML attribute names. IBM and other vendors document DoS impact on affected...

CVE-2015-5002

IBM Host On-Demand (11.0–11.0.14) is affected by a DOM XSS in the administrative interface caused by improper input validation. A remote attacker can trigger script execution via a crafted URL, potentially compromising user sessions. Remediation: upgrade to Host On-Demand 11.0.14 (special build) ...