Skip to content
OpenAdvisories

Archive

4 December 2019

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.1

    In WSO2 Enterprise Integrator 6.5.0, reflected XSS occurs when updating the message processor configuration from the so…

  • Medium 5.5
    CVE-2019-17554 Public exploit EPSS 12%

    Improper Restriction of XML External Entity Reference in Apache Olingo

    The XML content type entity deserializer in Apache Olingo versions 4.0.0 to 4.6.0 is not configured to deny the resolution of external entities. Request with content type "application/xml", which trigger the deserialization of entities, can be used to trigger…