cve.bz

CWE-611: Improper Restriction of XML External Entity Reference, page 18

Filter

The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

What the weakness is: CWE-611 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-221 Data Serialization External Entities Blowup

The attack patterns MITRE's CAPEC relates to CWE-611, as MITRE names them. Credits.

Ask an AI about CWE-611

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-611: Improper Restriction of XML External Entity Reference and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/611.html and https://cve.bz/cve/cwe/611?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.5CVE-2020-8541EPSS 1.0%

    OX App Suite through 7.10.3 allows XXE attacks.

  2. 6.7CVE-2020-13883EPSS 0.8%

    In WSO2 API Manager 3.0.0 and earlier, WSO2 API Microgateway 2.2.0, and WSO2 IS as Key Manager 5.9.0 and earlier, Management Console allows XXE during addition or update of a Lifecycle.

  3. 7.7CVE-2020-13692EPSS 4.1%

    PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.

  4. 7.6CVE-2020-4509EPSS 1.5%

    IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Forc…

  5. 7.1CVE-2020-4246EPSS 1.4%

    IBM Security Identity Governance and Intelligence 5.2.6 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume …

  6. 7.5CVE-2020-2012EPSS 2.0%

    Improper restriction of XML external entity reference ('XXE') vulnerability in Palo Alto Networks Panorama management service allows remote unauthenticated attackers with network access to the Panorama management interface to read arbitrar…

  7. 9.8CVE-2018-1285EPSS 18%

    Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.

  8. 5.5CVE-2020-11541EPSS 0.3%

    In TechSmith SnagIt 11.2.1 through 20.0.3, an XML External Entity (XXE) injection issue exists that would allow a local attacker to exfiltrate data under the local Administrator account.

  9. 7.2CVE-2020-12719EPSS 1.0%

    XXE during an EventPublisher update can occur in Management Console in WSO2 API Manager 3.0.0 and earlier, API Manager Analytics 2.5.0 and earlier, API Microgateway 2.2.0, Enterprise Integrator 6.4.0 and earlier, IS as Key Manager 5.9.0 an…

  10. 4.9CVE-2020-3256EPSS 1.2%

    A vulnerability in the web-based management interface of Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) Software could allow an authenticated, remote attacker to gain read access to information that is stored on an affected syste…

  11. 7.5CVE-2020-12642EPSS 1.4%

    An issue was discovered in service-api before 4.3.12 and 5.x before 5.1.1 for Report Portal. It allows XXE, with resultant secrets disclosure and SSRF, via JUnit XML launch import.

  12. 9.8CVE-2020-10683EPSS 7.3%

    dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavi…

  13. 7.2CVE-2020-11885EPSS 0.8%

    WSO2 Enterprise Integrator through 6.6.0 has an XXE vulnerability where a user (with admin console access) can use the XML validator to make unintended network invocations such as SSRF via an uploaded file.

  14. 7.1CVE-2020-2178EPSS 0.9%

    Jenkins Parasoft Findings Plugin 10.4.3 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

  15. 9.3CVE-2020-6238EPSS 1.3%

    SAP Commerce, versions - 6.6, 6.7, 1808, 1811, 1905, does not process XML input securely in the Rest API from Servlet xyformsweb, leading to Missing XML Validation. This affects confidentiality and availability (partially) of SAP Commerce.

  16. 7.5CVE-2020-10629EPSS 1.2%

    WebAccess/NMS (versions prior to 3.0.2) does not sanitize XML input. Specially crafted XML input could allow an attacker to read sensitive files.

  17. 8.2CVE-2019-4391EPSS 1.2%

    HCL AppScan Standard is vulnerable to XML External Entity Injection (XXE) attack when processing XML data

  18. 9.8CVE-2020-11586EPSS 1.2%

    An XXE issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request that contains malicious XML DTD data.

  19. 9.1CVE-2020-10993EPSS 1.3%

    Osmand through 2.0.0 allow XXE because of binary/BinaryMapIndexReader.java.

  20. 9.8CVE-2020-10992EPSS 1.3%

    Azkaban through 3.84.0 allows XXE, related to validator/XmlValidatorManager.java and user/XmlUserManager.java.

  21. 9.8CVE-2020-10991EPSS 1.4%

    Mulesoft APIkit through 1.3.0 allows XXE because of validation/RestXmlSchemaValidator.java

  22. 9.8CVE-2020-10990EPSS 1.2%

    An XXE issue exists in Accenture Mercury before 1.12.28 because of the platformlambda/core/serializers/SimpleXmlParser.java component.

  23. 8.8CVE-2020-2171EPSS 1.1%

    Jenkins RapidDeploy Plugin 4.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

  24. 9.8CVE-2019-20627EPSS 2.3%

    AutoUpdater.cs in AutoUpdater.NET before 1.5.8 allows XXE.

  25. 9.8CVE-2020-10799EPSS 1.5%

    The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call.

  26. 7.5CVE-2019-20191EPSS 1.1%

    Oxygen XML Editor 21.1.1 allows XXE to read any file.

  27. 9.8CVE-2020-8540EPSS 13%

    An XML external entity (XXE) vulnerability in Zoho ManageEngine Desktop Central before the 07-Mar-2020 update allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted D…

  28. 9.1CVE-2020-9044EPSS 1.3%

    XXE vulnerability exists in the Metasys family of product Web Services which has the potential to facilitate DoS attacks or harvesting of ASCII server files. This affects Johnson Controls' Metasys Application and Data Server (ADS, ADS-Lite…

  29. 7.1CVE-2020-2144EPSS 1.1%

    Jenkins Rundeck Plugin 3.6.6 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

  30. 7.1CVE-2020-2138EPSS 0.9%

    Jenkins Cobertura Plugin 1.15 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

  31. 4.3CVE-2015-7968EPSS 0.6%

    nwbc_ext2int in SAP NetWeaver Application Server before Security Note 2183189 allows XXE attacks for local file inclusion via the sap/bc/ui2/nwbc/nwbc_ext2int/ URI.

  32. 9.8CVE-2020-9352EPSS 1.9%

    An issue was discovered in SmartClient 12.0. Unauthenticated exploitation of blind XXE can occur in the downloadWSDL feature by sending a POST request to /tools/developerConsoleOperations.jsp with a valid payload in the _transaction parame…

  33. 9.8CVE-2020-1693EPSS 4.3%

    A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity attacks via the /rpc/api endpoint. An unauthenticated remote attacker could use this flaw to retrieve the content of certain files and trigger a…

  34. 5.5CVE-2019-6194EPSS 0.7%

    An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow information disclosure.

  35. 8.8CVE-2020-1975EPSS 1.0%

    Missing XML validation vulnerability in the PAN-OS web interface on Palo Alto Networks PAN-OS software allows authenticated users to inject arbitrary XML that results in privilege escalation. This issue affects PAN-OS 8.1 versions earlier …

  36. 4.9CVE-2020-6187EPSS 0.9%

    SAP NetWeaver (Guided Procedures), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate an XML document input from a compromised admin, leading to Denial of Service.

  37. 8.8CVE-2020-2120EPSS 1.1%

    Jenkins FitNesse Plugin 1.30 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks.

  38. 8.8CVE-2020-2115EPSS 1.1%

    Jenkins NUnit Plugin 0.25 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks.

  39. 9.8CVE-2014-2052EPSS 2.5%

    Zend Framework, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.

  40. 9.8CVE-2013-4334EPSS 1.4%

    opWebAPIPlugin 0.5.1, 0.4.0, and 0.1.0: XXE Vulnerabilities

  41. 5.3CVE-2019-10782EPSS 1.5%

    All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity (XXE) Injection due to an incomplete fix for CVE-2019-9658.

  42. 7.6CVE-2020-2108EPSS 0.9%

    Jenkins WebSphere Deployer Plugin 1.6.1 and earlier does not configure the XML parser to prevent XXE attacks which can be exploited by a user with Job/Configure permissions.

  43. 7.1CVE-2019-4707EPSS 1.4%

    IBM Security Access Manager Appliance 9.0.7.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory res…

  44. 9.1CVE-2013-4333EPSS 2.2%

    OpenPNE 3 versions 3.8.7, 3.6.11, 3.4.21.1, 3.2.7.6, 3.0.8.5 has an External Entity Injection Vulnerability

  45. 7.5CVE-2015-1811EPSS 1.4%

    XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document.

  46. 7.5CVE-2015-1809EPSS 1.4%

    XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query.

  47. 8.8CVE-2020-2092EPSS 1.4%

    Jenkins Robot Framework Plugin 2.0.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing users with Job/Configure to have Jenkins parse crafted XML documents.

  48. 7.5CVE-2019-18412EPSS 1.0%

    JetBrains IDETalk plugin before version 193.4099.10 allows XXE

  49. 7.1CVE-2015-8549EPSS 1.8%

    XML external entity (XXE) vulnerability in PyAMF before 0.8.0 allows remote attackers to cause a denial of service or read arbitrary files via a crafted Action Message Format (AMF) payload.

  50. 7.8CVE-2014-5238EPSS 1.9%

    XML external entity (XXE) vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev11 and 7.6.x before 7.6.0-rev9 allows remote attackers to read arbitrary files and possibly other unspecified impact via a crafted OpenDocument Text docu…