DoS Attack with XML Input

🗓️ 30 Jun 2015 00:00:00Reported by SpringType

spring🔗 spring.io👁 26 Views

Disable document type declarations to prevent XML denial of service; Spring enables this by default.

Reporter	Title	Published	Views	Family All 165
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found on thirdparty libraries used by IBM® MobileFirst Platform	26 Jan 202317:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Big Data Intelligence (SonarG) is vulnerable to using Components with Known Vulnerabilities	16 Jun 201822:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities	22 Jun 202316:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat affect IBM SDN VE (CVE- 2011-4905, CVE-2013-0248,CVE-2014-0050,CVE-2014-3577,CVE-2014-0054,CVE- 2013-7315,CVE-2013-6429,CVE-2014-0119,CVE-2014-0099,CVE-2014-1904)	18 Jun 201801:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Spring Framework affect IBM InfoSphere Information Server	11 Jul 201919:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities	18 Feb 201914:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Spring Web affect watsonx.data	10 Feb 202510:24	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Pivota Spring Framework, VMware Tanzu Spring Framework, VMware Spring Framework might affect IBM Storage Defender Copy Data Management.	16 May 202519:21	–	ibm
CNVD	Unspecified Vulnerability in Red Hat JBoss BPM Suite	12 Jun 201600:00	–	cnvd
Check Point Advisories	Multiple Products XML Public External Entity Information Disclosure (CVE-2013-3617; CVE-2013-4152; CVE-2013-6429; CVE-2014-0002; CVE-2014-0423)	29 Sep 201300:00	–	checkpoint_advisories

Source	Link
jira	www.jira.spring.io/browse/SPR-13136

30 Jun 2015 00:00Current

5.3Medium risk

Vulners AI Score5.3

CVSS 24.3

CVSS 35.5

EPSS0.9056