XML External Entities (XXE)

🗓️ 06 Aug 2018 02:11:43Reported by Veracode Vulnerability DatabaseType

XML External Entities vulnerability in libxml2 parser

Reporter	Title	Published	Views	Family All 224
ibm	Security Bulletin: Vulnerabilities in Libxml2 affect System x Integrated Management Module (IMM) (CVE-2014-0191, CVE-2014-3660)	14 Apr 202314:32	–	ibm
ibm	Security Bulletin: PowerKVM is affected by a libxml2 vulnerability (CVE-2014-0191)	18 Jun 201801:28	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities in libxml2 affect IBM Flex System Manger (FSM) (CVE-2013-2877, CVE-2014-0191, CVE-2014-3660)	31 Jan 201902:10	–	ibm
ibm	Security Bulletin: Libxml2 vulnerabilities in Network Intrusion Prevention System (CVE-2014-0191, CVE-2013-2877, CVE-2014-3660, CVE-2013-5211)	23 Feb 202219:48	–	ibm
ibm	Security Bulletin: Integrated Management Module II (IMM2) affected by vulnerabilities in libxml2 (CVE-2014-0191, CVE-2014-3660)	31 Jan 201901:55	–	ibm
ibm	Security Bulletin: Vulnerabilities in libxml2 affect System Networking Products (CVE-2014-0191, CVE-2013-2877, CVE-2014-3660)	31 Jan 201901:55	–	ibm
ibm	Security Bulletin: Rational Systems Tester is affected by Libxml2 vulnerability (CVE-2014-0191)	17 Jun 201804:55	–	ibm
ibm	Security Bulletin: Vulnerabilities affect IBM's Advanced Management Module (AMM)	14 Apr 202314:32	–	ibm
ibm	Security Bulletin: IBM BladeCenter Advanced Management Module is affected by libxml2 vulnerabilities (CVE-2014-0191, CVE-2013-2877, CVE-2014-3660)	31 Jan 201901:45	–	ibm
ibm	Security Bulletin: IBM Netezza Analytics (CVE-2014-0191)	18 Oct 201903:10	–	ibm

Vulners

Node

libxml2.so libxml2.soRange2.7.6–2.9.1cpp

xmlsoft libxml2Match2.7.6_4.el6_2.4

xmlsoft libxml2Match2.7.6_4.el6_2.1

xmlsoft libxml2Match2.7.6_8.el6_3.4

xmlsoft libxml2Match2.7.6_8.el6_3.3

xmlsoft libxml2Match2.7.6_4.el6

xmlsoft libxml2Match2.7.6_1.el6

xmlsoft libxml2Match2.7.6_12.el6_4.1

Source	Link
github	www.github.com/GNOME/libxml2/commit/dd8367da17c2948981a51e52c8a6beb445edf825
securityfocus	www.securityfocus.com/bid/67233
lists	www.lists.apple.com/archives/security-announce/2015/Aug/msg00001.html
lists	www.lists.apple.com/archives/security-announce/2015/Aug/msg00002.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
git	www.git.gnome.org/browse/libxml2/commit/
support	www.support.apple.com/kb/HT205030
support	www.support.apple.com/kb/HT205031
www-01	www.www-01.ibm.com/support/docview.wss
oracle	www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

30 Aug 2022 09:28Current

7.1High risk

Vulners AI Score7.1

CVSS 24.3

EPSS0.081