CWE-91 · XML Injection (Blind XPath Injection) (page 2)
Page 2 of 2 — CVEs classified under CWE-91, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-0646 | Critical | 9.8 | 2020-01-14 | A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Inje… |
CVE-2014-1409 | Critical | 9.1 | 2020-01-08 | MobileIron VSP versions prior to 5.9.1 and Sentry versions prior to 5.0 have an authentication bypass vulnerability due to an XML file with obfuscated passwords |
CVE-2018-1721 | High | 8.8 | 2019-11-09 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this… |
CVE-2019-8158 | Critical | 9.8 | 2019-11-06 | An XPath entity injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An attacker can craft a GET request to p… |
CVE-2019-17323 | High | 8.8 | 2019-10-30 | ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print function of rexpert viewer with modified XML docum… |
CVE-2013-4857 | Critical | 9.8 | 2019-10-25 | D-Link DIR-865L has PHP File Inclusion in the router xml file. |
CVE-2019-17626 | Critical | 9.8 | 2019-10-16 | ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="… |
CVE-2019-0370 | Medium | 6.5 | 2019-10-08 | Due to missing input validation, SAP Financial Consolidation, before versions 10.0 and 10.1, enables an attacker to use crafted input to interfere with the str… |
CVE-2019-4539 | High | 7.1 | 2019-10-02 | IBM Security Directory Server 6.4.0 does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or co… |
CVE-2019-16941 | Critical | 9.8 | 2019-09-28 | NSA Ghidra through 9.0.4, when experimental mode is enabled, allows arbitrary code execution if the Read XML Files feature of Bit Patterns Explorer is used wit… |
CVE-2019-14277 | Critical | 9.8 | 2019-07-26 | Axway SecureTransport 5.x through 5.3 (or 5.x through 5.5 with certain API configuration) is vulnerable to unauthenticated blind XML injection (and XXE) in the… |
CVE-2019-1010017 | High | 7.5 | 2019-07-15 | libnmap < v0.6.3 is affected by: XML Injection. The impact is: Denial of service (DoS) by consuming resources. The component is: XML Parsing. The attack vector… |
CVE-2019-9892 | Medium | 6.5 | 2019-05-22 | An issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0.17, and 7.x through 7.0.6. An attacker who is logged into OTRS… |
CVE-2019-0268 | High | 8.1 | 2019-03-12 | SAP BusinessObjects Business Intelligence Platform (CMC Module), versions 4.10, 4.20 and 4.30, does not sufficiently validate an XML document accepted from an… |
CVE-2018-19277 | High | 8.8 | 2018-11-14 | securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file |
CVE-2018-2477 | High | 8.8 | 2018-11-13 | Knowledge Management (XMLForms) in SAP NetWeaver, versions 7.30, 7.31, 7.40 and 7.50 does not sufficiently validate an XML document accepted from an untrusted… |
CVE-2018-16784 | High | 7.2 | 2018-09-21 | DedeCMS 5.7 SP2 allows XML injection, and resultant remote code execution, via a "<file type='file' name='../" substring. |
CVE-2018-16785 | High | 8.8 | 2018-09-19 | XML injection vulnerability exists in the file of DedeCMS V5.7 SP2 version, which can be utilized by attackers to create script file to obtain webshell |
CVE-2018-1000632 | High | 7.5 | 2018-08-20 | dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an… |
CVE-2018-1000526 | High | 7.5 | 2018-06-26 | Openpsa contains a XML Injection vulnerability in RSS file upload feature that can result in Remote denial of service. This attack appear to be exploitable via… |
CVE-2016-6272 | High | 7.5 | 2018-02-20 | XPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an XML document containing static display strings, such as field la… |
CVE-2017-1000452 | High | 7.5 | 2018-01-02 | An XML Signature Wrapping vulnerability exists in Samlify 2.2.0 and earlier, and in predecessor Express-saml2 which could allow attackers to impersonate arbitr… |
CVE-2013-7429 | Critical | 9.8 | 2017-09-14 | The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the url parameter to plugin_googlemap2_proxy.php. |
CVE-2015-3932 | High | 7.8 | 2017-07-21 | Netlock Mokka before 2.7.8.1204 allows remote attackers to perform XML signature wrapping attacks via an e-akta signed document with a ds:Object node with a cr… |
CVE-2015-3931 | High | 7.8 | 2017-07-21 | Microsec e-Szigno before 3.2.7.12 allows remote attackers to perform XML signature wrapping attacks via an e-akta signed document with a ds:Object node with a… |
CVE-2017-10603 | High | 7.0 | 2017-07-17 | An XML injection vulnerability in Junos OS CLI can allow a locally authenticated user to elevate privileges and run arbitrary commands as the root user. This i… |
CVE-2017-2171 | Medium | 6.1 | 2017-05-22 | Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact For… |
CVE-2017-5654 | High | 7.5 | 2017-05-12 | In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthorized read access to files on the host w… |
CVE-2016-5697 | High | 7.5 | 2017-01-23 | Ruby-saml before 1.3.0 allows attackers to perform XML signature wrapping attacks via unspecified vectors. |
CVE-2016-2932 | Medium | 5.3 | 2016-11-30 | IBM BigFix Remote Control before 9.1.3 allows remote attackers to conduct XML injection attacks via unspecified vectors. |
CVE-2013-4221 | | 2013-10-10 | The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources using the Java XMLDecoder, whic… | |
CVE-2008-5024 | | 2008-11-13 | Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly escape quote ch… |