CWE-611
Improper Restriction of XML External Entity Reference
The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.
1,250 vulnerabilities with CWE-611
CVE-2022-45468
MEDIUM
VISAM VBASE Automation Base < 11.7.5 - XML External Entity Injection
CVSS 5.5
CVE-2022-45121
MEDIUM
VISAM VBASE Automation Base < 11.7.5 - XML External Entity Injection
CVSS 5.5
CVE-2022-43512
MEDIUM
VISAM VBASE Automation Base <11.7.5 - Info Disclosure
CVSS 5.5
CVE-2022-41696
MEDIUM
VISAM VBASE Automation Base <11.7.5 - Info Disclosure
CVSS 5.5
CVE-2022-39954
HIGH
FortiNAC 8.3.7-9.4.1 - XML External Entity Injection via Crafted XML Documents
CVSS 7.3
CVE-2022-45588
HIGH
Talend Remote Engine Gen 2 < R2022-09 - Authenticated XML External Entity Injection
CVSS 7.8
CVE-2022-38389
HIGH
IBM Tivoli Workload Scheduler <10.1 - XXE
CVSS 7.1
CVE-2022-22486
CRITICAL
IBM Tivoli Workload Scheduler <10.1 - XXE
CVSS 10.0
CVE-2022-47873
CRITICAL
Netcad KEOS 1.0 - XML External Entity Injection
CVSS 9.8
CVE-2022-4818
MEDIUM
Talend Open Studio for MDM <20221220_1938 - XML External Entity Ref...
CVSS 5.5
CVE-2022-41967
HIGH
Dragonfly 0.3.0-SNAPSHOT - XML External Entity Injection
CVSS 7.0
CVE-2022-4607
MEDIUM
3D City Database OGC Web Feature Service <5.2.0 - XML External Enti...
CVSS 5.5
CVE-2022-47514
HIGH
XML-RPC.NET <2.5.0 - XML External Entity Injection via pingback.aspx
CVSS 8.8
CVE-2022-25628
HIGH
Symantec Identity Manager 14.4 - Authenticated XML External Entity Injection in Management Console
CVSS 8.8
CVE-2022-37911
LOW
ArubaOS 6.5.4.0-6.5.4.21 and SD-WAN 8.7.0.0-2.3.0.0-8.7.0.0-2.3.0.5 - Authenticated XML External Entity Injection
CVSS 3.8
CVE-2022-46682
CRITICAL
Jenkins Plot Plugin < 2.1.12 - XML External Entity Injection
CVSS 9.8
CVE-2022-46827
LOW
JetBrains IntelliJ IDEA <2022.3 - SSRF
CVSS 3.9
CVE-2022-45326
MEDIUM
Kwoksys Information Server < 2.9.5.SP31 - Authenticated XML External Entity Injection
CVSS 4.9
CVE-2022-40771
MEDIUM
Zoho ManageEngine ServiceDesk Plus <= 13010 - XML External Entity Injection
CVSS 4.9
CVE-2022-3980
CRITICAL
Sophos Mobile 5.0.0-9.7.4 - XML External Entity Injection
CVSS 9.8
CVE-2022-20938
MEDIUM
Cisco Firepower Management Center - XML External Entity Injection via Module Import
CVSS 4.3
CVE-2022-45400
CRITICAL
Jenkins JAPEX Plugin < 1.7 - XML External Entity Injection
CVSS 9.8
CVE-2022-45397
CRITICAL
Jenkins OSF Builder Suite : : XML Linter Plugin < 1.0.2 - XML External Entity Injection
CVSS 9.8
CVE-2022-45396
CRITICAL
Jenkins SourceMonitor Plugin < 0.2 - XML External Entity Injection
CVSS 9.8
CVE-2022-45395
CRITICAL
Jenkins CCCC Plugin < 0.6 - XML External Entity Injection
CVSS 9.8
Details
Vulnerabilities
1,250