Browse CVEs

CRITICAL 9.8 CVE-2022-3980EPSS 8% An XML External Entity (XEE) vulnerability allows server-side request forgery (SSRF) and potential code execution in Sophos Mobile managed on-premise… Mobile 9.7.5+ Fix from $2,3002022-11-16 CRITICAL 9.8 CVE-2022-45397 Jenkins OSF Builder Suite : : XML Linter Plugin 1.0.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. Osf Builder Suite \ after 1.0.2 Fix from $2,3002022-11-15 CRITICAL 9.8 CVE-2022-45400 Jenkins JAPEX Plugin 1.7 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. Japex after 1.7 Fix from $2,3002022-11-15 CRITICAL 9.8 CVE-2022-45395 Jenkins CCCC Plugin 0.6 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. Cccc after 0.6 Fix from $2,3002022-11-15 CRITICAL 9.8 CVE-2022-45396 Jenkins SourceMonitor Plugin 0.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. Sourcemonitor after 0.2 Fix from $2,3002022-11-15 MEDIUM 5.5 CVE-2022-45386 Jenkins Violations Plugin 0.7.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. Violations after 0.7.11 Fix from $1,6002022-11-15 MEDIUM 5.3 CVE-2022-43689 Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to XXE based DNS requests leading to IP disclosure. Concrete Cms 8.5.10+ Fix from $1,6002022-11-14 MEDIUM 6.5 CVE-2022-43570 In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user can perform an extensible markup language (XML) external entity (… Splunk 8.1.12 / 8.2.9+ Fix from $1,6002022-11-04 HIGH 7.2 CVE-2022-3340 XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated administrator to perform XXE attack in … Intrusion Prevention System Manager 10.1+ Fix from $1,9502022-11-04 HIGH 7.5 CVE-2022-42745 CandidATS version 3.0.0 allows an external attacker to read arbitrary files from the server. This is possible because the application is vulnerable t… Candidats No fix yet Fix from $1,9502022-11-03 CRITICAL 9.1 CVE-2022-40747 "IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker co… Infosphere Information Server Patch available Fix from $2,3002022-11-03 CRITICAL 9.1 CVE-2022-31678EPSS 8% VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability. On VCF 3.x instances with NSX-V deployed, this may allow a user … Cloud Foundation 3.11 / 6.4.14+ Fix from $2,3002022-10-28 HIGH 7.5 CVE-2022-43430 Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. Compuware Topaz For Total Test after 2.4.8 Fix from $1,9502022-10-19 HIGH 7.5 CVE-2022-43415 Jenkins REPO Plugin 1.15.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. Repo 1.16.0+ Fix from $1,9502022-10-19 MEDIUM 5.4 CVE-2022-3338 An External XML entity (XXE) vulnerability in ePO prior to 5.10 Update 14 can lead to an unauthenticated remote attacker to potentially trigger a Ser… Epolicy Orchestrator 5.10.0+ Fix from $1,6002022-10-18 HIGH 7.5 CVE-2022-42341EPSS 36% Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Restriction of XML External Entity Reference… Coldfusion Mitigation only Fix from $1,9502022-10-14 HIGH 7.5 CVE-2022-38419EPSS 53% Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Restriction of XML External Entity Reference… Coldfusion Patch available Fix from $1,9502022-10-14 CRITICAL 9.8 CVE-2022-42307 An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML Exte… Netbackup after 10.0.0.1 Fix from $2,3002022-10-03 HIGH 8.8 CVE-2022-42301 An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML Exte… Netbackup after 10.0.0.1 Fix from $1,9502022-10-03 HIGH 7.1 CVE-2022-34348 IBM Sterling Partner Engagement Manager 6.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacke… Sterling Partner Engagement Manager 6.1.2.6 / 6.2.0.4+ Fix from $1,9502022-09-23 HIGH 7.5 CVE-2022-40705 An Improper Restriction of XML External Entity Reference vulnerability in RPCRouterServlet of Apache SOAP allows an attacker to read arbitrary files … Soap Mitigation only Fix from $1,9502022-09-22 CRITICAL 9.1 CVE-2022-41241 Jenkins RQM Plugin 2.8 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. Rqm after 2.8 Fix from $2,3002022-09-21 CRITICAL 9.8 CVE-2022-41226 Jenkins Compuware Common Configuration Plugin 1.0.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. Compuware Common Configuration 1.0.15+ Fix from $2,3002022-09-21 MEDIUM 6.5 CVE-2022-38342 Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a XML External Entity (XXE) vulnerability which allows authentica… Fme Server 2021.2.6.0 / 2022.0.0.2+ Fix from $1,6002022-09-13 CRITICAL 9.8 CVE-2022-1700 Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is a… Cloud Security Gateway 8.5.5 / 8.8.2+ Fix from $2,3002022-09-12 CRITICAL 9.8 CVE-2022-39135 Apache Calcite 1.22.0 introduced the SQL operators EXISTS_NODE, EXTRACT_XML, XML_TRANSFORM and EXTRACT_VALUE do not restrict XML External Entity refe… Calcite 1.32.0+ Fix from $2,3002022-09-11 HIGH 7.5 CVE-2022-37189 DDMAL MEI2Volpiano 0.8.2 is vulnerable to XML External Entity (XXE), leading to a Denial of Service. This occurs due to the usage of the unsafe 'xml.… Mei2volpiano after 0.8.2 Fix from $1,9502022-09-07 HIGH 8.1 CVE-2022-36773 IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote att… Cognos Analytics 11.1.7 / 11.2.3+ Fix from $1,9502022-09-01 HIGH 8.6 CVE-2022-2759 Delta Electronics Delta Robot Automation Studio (DRAS) versions prior to 1.13.20 are affected by improper restrictions where the software processes a… Delta Robot Automation Studio 1.13.20+ Fix from $1,9502022-08-31 MEDIUM 6.5 CVE-2022-2330 Improper Restriction of XML External Entity Reference vulnerability in DLP Endpoint for Windows prior to 11.9.100 allows a remote attacker to cause t… Data Loss Prevention Endpoint 11.6.600.212 / 11.9.100+ Fix from $1,6002022-08-30