dbcve.org
Vulnerability index

Browse CVEs

127 matching
Cards Compact
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness XML External Entity (XXE)CWE-611 × clear
Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6649 Adobe 6383 Ibm 6266 Cisco 5746 Debian 3919 Apache 2864 Mozilla 2857 Redhat 2581
Infosphere Information Server CRITICAL 9.1
CVE-2022-40747

"IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker co…

Patch available
Fix from $2,300 2022-11-03
Sterling Partner Engagement Manager HIGH 7.1
CVE-2022-34348

IBM Sterling Partner Engagement Manager 6.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacke…

Fix: 6.1.2.6 / 6.2.0.4+
Fix from $1,950 2022-09-23
Cognos Analytics HIGH 8.1
CVE-2022-36773

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote att…

Fix: 11.1.7 / 11.2.3+
Fix from $1,950 2022-09-01
Mq CRITICAL 9.1
CVE-2022-22489

IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A rem…

Patch available
Fix from $2,300 2022-08-19
Datapower Gateway CRITICAL 9.1
CVE-2022-31775

IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to an XML Exte…

Fix: 10.0.1.8 / 10.5.0.1+
Fix from $2,300 2022-08-01
Partner Engagement Manager HIGH 7.1
CVE-2022-22358

IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to an XML External Entity Injection (XXE) attack when processin…

Fix: 6.1.2.5 / 6.2.0.3+
Fix from $1,950 2022-07-19
Cognos Controller HIGH 8.2
CVE-2020-4875

IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote at…

Mitigation only
Fix from $1,950 2022-01-21
Cognos Controller HIGH 8.2
CVE-2020-4876

IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote at…

Mitigation only
Fix from $1,950 2022-01-21
Jazz For Service Management HIGH 8.1
CVE-2021-29831

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to an XML External Entity Injection (XXE) attack when proce…

Patch available
Fix from $1,950 2021-09-21
Qradar Security Information And Event Manager CRITICAL 9.1
CVE-2021-20399

IBM Qradar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.…

Fix: 7.3.3 / 7.4.3+
Fix from $2,300 2021-07-27
Financial Transaction Manager CRITICAL 9.1
CVE-2020-5003

IBM Financial Transaction Manager 3.2.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker co…

Mitigation only
Fix from $2,300 2021-06-11
Cognos Analytics HIGH 8.2
CVE-2020-4300

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could e…

Patch available
Fix from $1,950 2021-06-01
Cognos Analytics HIGH 7.1
CVE-2019-4730

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could e…

Patch available
Fix from $1,950 2021-06-01
Websphere Application Server HIGH 8.2
CVE-2021-20492

IBM WebSphere Application Server 8.0, 8.5, 9.0, and Liberty Java Batch is vulnerable to an XML External Entity Injection (XXE) attack when processing…

Fix: after 21.0.0.5
Fix from $1,950 2021-05-26
Qradar Security Information And Event Manager HIGH 8.1
CVE-2020-5013

IBM QRadar SIEM 7.3 and 7.4 may vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit …

Fix: 7.3.3 / 7.4.2+
Fix from $1,950 2021-05-05
Websphere Application Server HIGH 8.2
CVE-2021-20454

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A rem…

Fix: after 9.0.5.7
Fix from $1,950 2021-04-21
Websphere Application Server HIGH 8.2
CVE-2021-20453

IBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote a…

Fix: 8.0.0.15 / 8.5.5.20+
Fix from $1,950 2021-04-20
Engineering Insights HIGH 7.1
CVE-2021-20502

IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploi…

Patch available
Fix from $1,950 2021-03-30
Cloud Pak For Automation HIGH 7.1
CVE-2021-20482

IBM Cloud Pak for Automation 20.0.2 and 20.0.3 IF002 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remo…

Mitigation only
Fix from $1,950 2021-03-30
Websphere Application Server HIGH 8.2
CVE-2021-20353EPSS 5%

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A re…

Fix: 7.0.0.45 / 8.0.0.15+
Fix from $1,950 2021-02-10
Websphere Application Server HIGH 8.2
CVE-2020-4949

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A re…

Fix: after 9.0.5.6
Fix from $1,950 2021-01-26
Curam Social Program Management HIGH 8.1
CVE-2020-4772

An XML External Entity Injection (XXE) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. A remote attacker could exploit…

Mitigation only
Fix from $1,950 2020-10-12
Websphere Application Server HIGH 7.5
CVE-2020-4643

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A re…

Fix: after 9.0.5.5
Fix from $1,950 2020-09-21
Urbancode Deploy HIGH 8.2
CVE-2020-4481

IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML …

Mitigation only
Fix from $1,950 2020-08-05
Cognos Analytics CRITICAL 9.1
CVE-2020-4377

IBM Cognos Anaytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could ex…

Mitigation only
Fix from $2,300 2020-08-03
Maximo Asset Management HIGH 8.2
CVE-2020-4463EPSS 32%

IBM Maximo Asset Management 7.6.0.1 and 7.6.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote att…

Patch available
Fix from $1,950 2020-07-29
Sterling External Authentication Server HIGH 8.2
CVE-2020-4462

IBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2, and 2.4.2 and IBM Sterling Secure Proxy 6.0.1, 6.0.0, 3.4.3, and 3.4.2 are vulnera…

Mitigation only
Fix from $1,950 2020-07-16
Qradar Security Information And Event Manager MEDIUM 5.5
CVE-2020-4510

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit …

Fix: after 7.3.2
Fix from $1,600 2020-07-14
Qradar Security Information And Event Manager HIGH 7.6
CVE-2020-4509

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit …

Mitigation only
Fix from $1,950 2020-06-04
Security Identity Governance And Intelligence HIGH 7.1
CVE-2020-4246

IBM Security Identity Governance and Intelligence 5.2.6 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A re…

Patch available
Fix from $1,950 2020-05-28