共收录 148 条相关情报。
← 返回所有主题CVE-2026-12752
IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) atta
CVE-2026-12667
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1
CVE-2026-12666
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1
CVE-2026-13265
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1
CVE-2026-12756
IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) atta
CVE-2026-13287
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1
CVE-2026-13285
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1
CVE-2026-13275
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1
CVE-2026-13107
IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to X
CVE-2026-18061
Improper restriction of XML external entity references in the RemoteQueryCachePlugin in AWS Advanced JDBC Wrapper 3.3.0
CVE-2026-89260
MoguBlog through 6.2 contains an XML external entity injection vulnerability in the WeChat callback handler at POST /wec
CVE-2026-82578
When XML batch processing is turned on and the XPath option is selected, the raw batch input goes through a default XPat
CVE-2026-78224
The XSLT Transformer Step builds a bare TransformerFactory without the proper security options set, so XXE injection can
CVE-2026-89212
A flaw resulting in XML external entity (XXE) was found in Akana API Platform in which references were improperly restri
CVE-2026-84941
An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada Controller allows an aut
CVE-2026-84941
An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada Controller allows an aut
CVE-2026-19596
An XML External Entity (XXE) vulnerability exists in the XML collector of multiple versions of OpenNMS Meridian and Hori
CVE-2026-19614
The API is prone to XML external entity (XXE) injection. By default, XML external entity support is enabled. This issue
CVE-2026-71375
Improper restriction of XML external entity reference vulnerability in Cosminexus Component Container. This issue affec
CVE-2026-76958
SAP Integration Suite does not sufficiently validate XML documents accepted from untrusted sources in certain internal c