CVE-2013-4335

CRITICAL Year: 2013
CVSS v3 Score
9.8
Critical
CVSS v2 Score
7.5
High
Weakness Type
CWE-776
View all →

Vulnerability Description

opOpenSocialPlugin 0.8.2.1, > 0.9.9.2, 0.9.13, 1.2.6: Multiple XML External Entity Injection Vulnerabilities

Related Vulnerabilities

CVE-2014-2228

CRITICAL
CVSS:9.8(Critical)

The XStream extension in HP Fortify SCA before 2.2 RC3 allows remote attackers to execute arbitrary code via unsafe deserialization of XML messages.

CWE-7762014

CVE-2020-24590

CRITICAL
CVSS:9.1(Critical)

The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML Entity Expansion attacks.

CWE-7762020

CVE-2021-23926

CRITICAL
CVSS:9.1(Critical)

The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion atta...

CWE-7762021

CVE-2024-28982

HIGH
CVSS:8.2(High)

Hitachi Vantara Pentaho Business Analytics Server versions before 10.1.0.0 and 9.3.0.7, including 8.3.x do not correctly protect the ACL service endpoint of the Pentaho User Console against XML Extern...

CWE-7762024

CVE-2014-2228

CRITICAL
CVSS:9.8(Critical)

The XStream extension in HP Fortify SCA before 2.2 RC3 allows remote attackers to execute arbitrary code via unsafe deserialization of XML messages.

CWE-7762014

CVE-2020-24590

CRITICAL
CVSS:9.1(Critical)

The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML Entity Expansion attacks.

CWE-7762020