VYPR

CWE-611

Improper Restriction of XML External Entity Reference

BaseDraft

Description

The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

Hierarchy (View 1000)

Parents

Children

none

Related attack patterns (CAPEC)

CAPEC-221

CVEs mapped to this weakness (1,331)

page 2 of 67
  • CVE-2017-12629CriOct 14, 2017
    Apache
    Solr
    risk 0.67cvss 9.8epss 0.92

    Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note…

  • CVE-2016-6256CriMay 26, 2017
    SAP
    Business One (B1i)
    risk 0.66cvss 9.6epss 0.08

    SAP Business One for Android 1.2.3 allows remote attackers to conduct XML External Entity (XXE) attacks via crafted XML data in a request to B1iXcellerator/exec/soap/vP.001sap0003.in_WCSX/com.sap.b1i.vplatform.runtime/INB_WS_CALL_SYNC_XPT/INB_WS_CALL_SYNC_XPT.ipo/proc, aka SAP…

  • CVE-2022-22486CriFeb 3, 2023
    IBM
    Tivoli Workload Scheduler
    risk 0.65cvss 10.0epss 0.01

    IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226328.

  • CVE-2022-20780CriMay 4, 2022
    Cisco Systems, Inc.
    Enterprise Nfv Infrastructure Software
    risk 0.65cvss 9.9epss 0.11

    Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual machine (VM) to the host machine, inject commands that execute at the root level, or leak system data from the host to the VM. For more…

  • CVE-2020-8540CriMar 11, 2020
    Zohocorp
    Manageengine Desktop Central
    risk 0.65cvss 9.8epss 0.13

    An XML external entity (XXE) vulnerability in Zoho ManageEngine Desktop Central before the 07-Mar-2020 update allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.

  • CVE-2019-14678CriNov 14, 2019
    Sas
    XML Mapper
    risk 0.65cvss 10.0epss 0.03

    SAS XML Mapper 9.45 has an XML External Entity (XXE) vulnerability that can be leveraged by malicious attackers in multiple ways. Examples are Local File Reading, Out Of Band File Exfiltration, Server Side Request Forgery, and/or Potential Denial of Service attacks. This…

  • CVE-2018-18406CriJun 19, 2019
    Tufin
    SecureTrack
    risk 0.65cvss 9.9epss 0.02

    An issue was discovered in Tufin SecureTrack 18.1 with TufinOS 2.16 build 1179(Final). The Audit Report module is affected by a blind XXE vulnerability when a new Best Practices Report is saved using a special payload inside the xml input field. The XXE vulnerability is blind…

  • CVE-2015-9280CriJan 16, 2019
    MailEnable
    Mailenable
    risk 0.65cvss 10.0epss 0.02

    MailEnable before 8.60 allows XXE via an XML document in the request.aspx Options parameter.

  • CVE-2018-1000838CriDec 20, 2018
    Autopsy
    autopsy
    risk 0.65cvss 10.0epss 0.03

    autopsy version <= 4.9.0 contains a XML External Entity (XXE) vulnerability in CaseMetadata XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Specially crafted CaseMetadata.

  • CVE-2018-1000837CriDec 20, 2018
    UML Designer
    UML Designer
    risk 0.65cvss 10.0epss 0.02

    UML Designer version <= 8.0.0 contains a XML External Entity (XXE) vulnerability in XML parser for plugins that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via malicious plugins.xml file.

  • CVE-2018-1000835CriDec 20, 2018
    Keepass
    Keepass
    risk 0.65cvss 10.0epss 0.02

    KeePassDX version <= 2.5.0.0beta17 contains a XML External Entity (XXE) vulnerability in kdbx file parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.

  • CVE-2018-1000831CriDec 20, 2018
    risk 0.65cvss 10.0epss 0.02

    K9Mail version <= v5.600 contains a XML External Entity (XXE) vulnerability in WebDAV response parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via malicious WebDAV server or intercept the…

  • CVE-2018-1000830CriDec 20, 2018
    Xr3player Project
    Xr3player
    risk 0.65cvss 10.0epss 0.01

    XR3Player version <= V3.124 contains a XML External Entity (XXE) vulnerability in Playlist parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.

  • CVE-2018-1000825CriDec 20, 2018
    Freecol
    Freecol
    risk 0.65cvss 10.0epss 0.02

    FreeCol version <= nightly-2018-08-22 contains a XML External Entity (XXE) vulnerability in FreeColXMLReader parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Freecol file.

  • CVE-2018-1000822CriDec 20, 2018
    Codelibs
    Fess
    risk 0.65cvss 10.0epss 0.02

    codelibs fess version before commit faa265b contains a XML External Entity (XXE) vulnerability in GSA XML file parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via specially crafted GSA XML…

  • CVE-2018-1000821CriDec 20, 2018
    Micromathematics Project
    Micromathematics
    risk 0.65cvss 10.0epss 0.02

    MicroMathematics version before commit 5c05ac8 contains a XML External Entity (XXE) vulnerability in SMathStudio files that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Specially crafted…

  • CVE-2018-1000820CriDec 20, 2018
    risk 0.65cvss 10.0epss 0.02

    neo4j-contrib neo4j-apoc-procedures version before commit 45bc09c contains a XML External Entity (XXE) vulnerability in XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This vulnerability appears to have been fixed in after…

  • CVE-2018-1000652CriAug 20, 2018
    Jabref
    Jabref
    risk 0.65cvss 10.0epss 0.02

    JabRef version <=4.3.1 contains a XML External Entity (XXE) vulnerability in MsBibImporter XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted…

  • CVE-2018-1000651CriAug 20, 2018
    Gchq
    Stroom
    risk 0.65cvss 10.0epss 0.02

    Stroom version <5.4.5 contains a XML External Entity (XXE) vulnerability in XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted XML file.

  • CVE-2018-1000644CriAug 20, 2018
    Eclipse
    RDF4j
    risk 0.65cvss 10.0epss 0.02

    Eclipse RDF4j version < 2.4.0 Milestone 2 contains a XML External Entity (XXE) vulnerability in RDF4j XML parser parsing RDF files that can result in the disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be…