XML external entities (XXE).

Moderate severity vulnerability that affects org.apache.ignite:ignite-core

• XML external entities (XXE)

<1.9 · fixed in 1.9

Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents

• XML external entities (XXE)

<4.4.2 · fixed in 4.4.2

XML external entity injection in WECON Technology Co., Ltd LeviStudioU

• WECON Technology Co., Ltd LeviStudioU
• XML external entities (XXE)

XML external entity injection in WECON PI Studio HMI and others

• WECON PI Studio HMI
• WECON PI Studio
• XML external entities (XXE)

Cisco Secure Access Control Server XML External Entity Injection Vulnerability

• Cisco Secure Access Control Server Solution Engine (ACSE)
• XML external entities (XXE)

External Entity processing in the RegistrationSharing module

• SUSE Linux SMT
• XML external entities (XXE)

XML external entity injection in [UNKNOWN] JBoss

• [UNKNOWN] JBoss
• XML external entities (XXE)

feedparser denial of service vulnerability

• XML external entities (XXE)

<5.1.2 · fixed in 5.1.2

XML external entity injection in Schweitzer Engineering Laboratories, Inc. AcSELerator Architect

• Schweitzer Engineering Laboratories, Inc. AcSELerator Architect
• XML external entities (XXE)

Pysaml2 does not sanitize XML responses

• XML external entities (XXE)

<4.5.0 · fixed in 4.5.0

ManageEngine Applications Manager 12 and 13 is vulnerable to privilege escalation due to improper restriction of an XML external entity

• ManageEngine Applications Manager
• XML external entities (XXE)

EpubCheck 4.0.1 is vulnerable to external XML entity processing attacks

• EpubCheck
• XML external entities (XXE)

XML external entity injection in [UNKNOWN] jboss

• [UNKNOWN] jboss
• XML external entities (XXE)

The Action Message Format (AMF3) deserializers used by Flamingo amf-serializer by Exadel, version 2.2.0, allows external entity references (XXEs) from XML documents embedded within AMF3 messages

• Exadel Flamingo amf-serializer
• XML external entities (XXE)

XML external entity injection in GE MDS PulseNET and MDS PulseNET Enterprise

• GE MDS PulseNET and MDS PulseNET Enterprise
• XML external entities (XXE)

XML external entity injection in Adobe ColdFusion ColdFusion Update 5 and earlier versions…

• Adobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions
• XML external entities (XXE)

XML external entity injection in spacewalk

• spacewalk
• XML external entities (XXE)

XML external entity injection in Microsoft Corporation Windows Remote Assistance

• Microsoft Corporation Windows Remote Assistance
• XML external entities (XXE)

A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request entity substitution, DTD validation, external DTD subset loading, or default DTD…

• XML external entities (XXE)

XML external entity injection in Cisco WebEx Meetings Server

• Cisco WebEx Meetings Server
• XML external entities (XXE)

XML external entity injection in Cisco AnyConnect

• Cisco AnyConnect
• XML external entities (XXE)

XML external entity injection in Schneider Electric Wonderware Historian Client

• Schneider Electric Wonderware Historian Client
• XML external entities (XXE)

BC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via the sap.com~tc~bpem~him~uwlconn~provider~web/bpemuwlconn URI, aka SAP Se…

• XML external entities (XXE)

libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened,…

• XML external entities (XXE)