Fallos del tipo CWE-611

698 resultados

Processamento Inseguro de XML Externo (XXE)

Ocorre quando a aplicação processa XML sem desabilitar ou validar entidades externas, permitindo que um atacante injete referências a arquivos locais ou recursos remotos. O parser XML resolve essas entidades e expõe dados sensíveis ou permite ataques de negação de serviço.

Ejemplo

Um serviço web que aceita XML de upload processa um arquivo contendo <!DOCTYPE foo [<!ENTITY xxe SYSTEM "file:///etc/passwd">]>. O parser resolve a entidade e retorna o conteúdo do arquivo no erro ou resposta, ou um atacante injeta billion laughs attack para consumir memória do servidor.

Cómo mitigar

Desabilite explicitamente DTDs e entidades externas no parser XML (em Java, use XMLConstants.ACCESS_EXTERNAL_DTD = ""; em Python, use defusedxml ou desabilite resolve_entities; sempre valide e sanitize entrada XML contra schema predefinido).

CVE-2026-40682CRITICALApache OpenNLP: XXE via Dictionary Parsing in DictionaryEntryPersistorEPSS 0.5%CVE-2026-20320HIGHA vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read seEPSS 0.5%CVE-2025-61823MEDIUMColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)EPSS 0.5%CVE-2022-45194LOWCBRN-Analysis before 22 allows XXE attacks via am mws XML document, leading to NTLMv2-SSP hash disclosure.EPSS 0.5%CVE-2024-10218CRITICALTIBCO Hawk Stored-XEE VulnerabilityEPSS 0.5%CVE-2023-41369LOWExternal Entity Loop vulnerability in SAP S/4HANA (Create Single Payment application)EPSS 0.5%CVE-2023-26057MEDIUMAn XXE issue was discovered in Nokia NetAct before 22 FP2211 via an XML document to the Configuration Dashboard page. Input validation and aEPSS 0.5%CVE-2026-54366HIGHCentreStack < 17.4 XXE via SharePoint Storage ConfigurationEPSS 0.5%CVE-2023-26058MEDIUMAn XXE issue was discovered in Nokia NetAct before 22 FP2211 via an XML document to a Performance Manager page. Input validation and a propeEPSS 0.5%CVE-2024-7098CRITICALXML Injection in SFS Consulting's ww.WinsureEPSS 0.5%CVE-2024-31139MEDIUMIn JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detectorEPSS 0.5%CVE-2023-6836MEDIUMMultiple WSO2 products have been identified as vulnerable due to an XML External Entity (XXE) attack abuses a widely available but rarely usEPSS 0.5%CVE-2025-33121HIGHIBM QRadar SIEM XML external entity injectionEPSS 0.5%CVE-2024-49352HIGHIBM Cognos Anaytics XML external entity injectionEPSS 0.5%CVE-2026-61570HIGHMPXJ: XXE Vulnerability in MerlinReaderEPSS 0.5%CVE-2024-4184MEDIUMMultiple XXE sinks in ALM archive post-build step in OpenText Application Automation ToolsEPSS 0.5%CVE-2024-4189MEDIUMMultiple XXE sinks in Run LoadRunner script step in OpenText Application Automation ToolsEPSS 0.5%CVE-2024-3486HIGH XML External Entity injection vulnerability in iManagerEPSS 0.5%CVE-2026-84941MEDIUMOmada Controller XML External Entity (XXE) Injection in SAML IdP Metadata Parsing Leading to Arbitrary Local File ReadEPSS 0.5%CVE-2026-81536HIGHDataStage on Cloud Pak for Data has several vulnerabilitiesEPSS 0.5%