CWE-112 · 7 kayıt

Missing XML Validation

Bu sınıftaki CVE’ler

7 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
36İzleyin	CVE-2022-28213Kavram kanıtı	When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently valisap · businessobjects business intelligence platform · CWE-112	Yüksek8,1	—	%12,5	12 Nis 2022
36İzleyin	CVE-2021-1359İstismar yok	Cisco Web Security Appliance Privilege Escalation Vulnerabilitycisco · web security appliance · CWE-112 RCE Komut enjeksiyonu	Yüksek8,8	—	%1,9	8 Tem 2021
35İzleyin	CVE-2020-1975İstismar yok	Missing XML Validation in PAN-OS Web Interfacepaloaltonetworks · pan-os · CWE-112	Yüksek8,8	—	%1,0	12 Şub 2020
30İzleyin	CVE-2023-40310İstismar yok	Missing XML Validation vulnerability in SAP PowerDesigner Client BPMN2 importsap · powerdesigner · CWE-112 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,8	9 Eki 2023
21İzleyin	CVE-2021-27780İstismar yok	HCL BigFix Mobile / Modern Client Management is vulnerable to unauthenticated XML interactionhcltech · bigfix mobile · CWE-112 Kimlik doğrulamasız	Orta5,3	—	%0,8	27 May 2022
17İzleyin	CVE-2020-27282İstismar yok	In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an XML validation vulnerability in the ventilator allows privileged attackerhamilton-medical · hamilton-t1 firmware · CWE-112 Hizmet dışı bırakma	Orta4,3	—	%0,3	15 Mar 2021
12İzleyin	CVE-2026-1190İstismar yok	Org.keycloak/keycloak-services: keycloak saml brokering: response delay due to unchecked notonorafter in subjectconfirmationdatared hat · red hat build of keycloak 26.4 · CWE-112 Kimlik doğrulamasız	Düşük3,1	—	%0,4	26 Oca 2026

CVE-2022-28213
36İzleyin
When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently vali
YüksekCVSS 8,1Kavram kanıtıEPSS %12
sap · businessobjects business intelligence platform12 Nis 2022
CVE-2021-1359
36İzleyin
Cisco Web Security Appliance Privilege Escalation Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %2
- RCE
- Komut enjeksiyonu
cisco · web security appliance8 Tem 2021
CVE-2020-1975
35İzleyin
Missing XML Validation in PAN-OS Web Interface
YüksekCVSS 8,8İstismar yokEPSS %1
paloaltonetworks · pan-os12 Şub 2020
CVE-2023-40310
30İzleyin
Missing XML Validation vulnerability in SAP PowerDesigner Client BPMN2 import
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Hizmet dışı bırakma
sap · powerdesigner9 Eki 2023
CVE-2021-27780
21İzleyin
HCL BigFix Mobile / Modern Client Management is vulnerable to unauthenticated XML interaction
OrtaCVSS 5,3İstismar yokEPSS %1
- Kimlik doğrulamasız
hcltech · bigfix mobile27 May 2022
CVE-2020-27282
17İzleyin
In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an XML validation vulnerability in the ventilator allows privileged attacker
OrtaCVSS 4,3İstismar yokEPSS %0
- Hizmet dışı bırakma
hamilton-medical · hamilton-t1 firmware15 Mar 2021
CVE-2026-1190
12İzleyin
Org.keycloak/keycloak-services: keycloak saml brokering: response delay due to unchecked notonorafter in subjectconfirmationdata
DüşükCVSS 3,1İstismar yokEPSS %0
- Kimlik doğrulamasız
red hat · red hat build of keycloak 26.426 Oca 2026

Tüm zafiyet sınıfları