CVE-2012-2656

CVE-2012-2656: An XML External Entity (XXE) vulnerability exists in Restlet 1.1.10 within an endpoint using XML transport, enabling a remote attacker to obtain sensitive information. Affected component: Restlet 1.1.10 (XML transport endpoint). Root cause: XXE in the XML processing path. Documente...

CVE-2014-2228

The CVE-2014-2228 issue affects the XStream extension in HP Fortify SCA prior to version 2.2 RC3, where unsafe deserialization of XML messages allows remote attackers to execute arbitrary code. The affected component is the XStream extension, with the root cause described as unsafe XML deserializ...