Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:6086
HistoryApr 11, 2018 - 7:01 a.m.

XML External Entity (XXE)

2018-04-1107:01:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

libxml2 is vulnerable to XML External Entity (XXE) attacks. The library does not disable document type declaration by default, allowing a malicious user to pass a file that can lead to arbitrary code execution or information disclosure.

CPENameOperatorVersion
libxml2.sole2.9.4
libxml2le2.7.8.7

Related

ubuntucve 1
nessus 12
cve 1
debiancve 1
openvas 13
redhatcve 1
prion 1
veracode 1
ibm 11
osv 3
debian 3
cloudfoundry 1
ubuntu 2
rubygems 1
gentoo 1
mageia 1
suse 1
androidsecurity 1
tenable 1
ics 1
ubuntucve
ubuntucve
CVE-2017-7375
2017-06-21 00:00:00
nessus
nessus
EulerOS Virtualization 2.5.0 : libxml2 (EulerOS-SA-2018-1336)
2018-10-26 00:00:00
openSUSE Security Update : libxml2 (openSUSE-2017-793)
2017-07-07 00:00:00
SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2017:1743-1)
2017-07-03 00:00:00
cve
cve
CVE-2017-7375
2018-02-19 19:29:00
debiancve
debiancve
CVE-2017-7375
2018-02-19 19:29:00
openvas
openvas
Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2018-1336)
2020-01-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:1743-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:1813-1)
2021-06-09 00:00:00
redhatcve
redhatcve
CVE-2017-7375
2017-06-16 12:52:20
prion
prion
Design/Logic Flaw
2018-02-19 19:29:00
veracode
veracode
Remote Code Execution (RCE)
2017-09-21 08:34:03
ibm
ibm
Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to arbitrary code execution due to CVE-2017-0663 and loss of confidentiality due to CVE-2017-7375
2022-11-03 17:22:15
Security Bulletin: IBM Streams may be affected by XMLsoft Libxml2 vulnerabilities
2018-06-16 14:17:37
Security Bulletin: Vulnerabilities in libxml2 affect IBM RackSwitch Products
2019-01-31 02:25:02
osv
osv
libxml2 - security update
2017-06-30 00:00:00
libxml2 - security update
2017-08-23 00:00:00
CVE-2017-7375
2018-02-19 19:29:00
debian
debian
[SECURITY] [DLA 1008-1] libxml2 security update
2017-06-30 20:47:21
[SECURITY] [DSA 3952-1] libxml2 security update
2017-08-23 04:54:22
[SECURITY] [DSA 3952-1] libxml2 security update
2017-08-23 04:54:22
cloudfoundry
cloudfoundry
USN-3424-1: libxml2 vulnerabilities | Cloud Foundry
2017-11-01 00:00:00
ubuntu
ubuntu
libxml2 vulnerabilities
2017-09-19 00:00:00
libxml2 vulnerabilities
2017-10-10 00:00:00
rubygems
rubygems
Nokogiri gem, via libxml, is affected by DoS and RCE vulnerabilities
2017-09-18 21:00:00
gentoo
gentoo
libxml2: Multiple vulnerabilities
2017-11-10 00:00:00
mageia
mageia
Updated libxml2 & perl-XML-LibXML packages fix security vulnerabilities
2018-01-03 18:50:51
suse
suse
Security update for SLES 12-SP2 Docker image (important)
2017-10-11 03:08:09
androidsecurity
androidsecurity
Android Security Bulletin—June 2017
2017-06-05 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON
Related for VERACODE:6086
ubuntucve1nessus12cve1debiancve1openvas13redhatcve1prion1veracode1ibm11osv3debian3cloudfoundry1ubuntu2rubygems1gentoo1mageia1suse1androidsecurity1tenable1ics1