Lucene search
Veracode Vulnerability DatabaseVERACODE:4350HistoryJun 02, 2017 - 6:02 a.m.
XML External Entity (XXE)
2017-06-0206:02:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
EPSS
0.003
Percentile
70.3%
Zend Framework (ZF1) is vulnerable to XML External Entity (XXE) attacks. Using these attacks, it is possible to read files, send HTTP requests to intranet servers and cause denial of service (DoS) conditions though CPU and memory consumption.
References
framework.zend.com/security/advisory/ZF2012-05
openwall.com/lists/oss-security/2012/12/20/2
openwall.com/lists/oss-security/2012/12/20/4
secunia.com/advisories/51583
www.debian.org/security/2012/dsa-2602
www.mandriva.com/security/advisories?name=MDVSA-2013:115
bugzilla.redhat.com/show_bug.cgi?id=889037
framework.zend.com/security/advisory/ZF2012-05
Related
amazon
amazon
Medium: php-ZendFramework
2013-02-04 15:19:00
nessus
nessus
Debian DSA-2602-1 : zendframework - XML external entity inclusion
2013-01-09 00:00:00
Fedora 17 : php-ZendFramework-1.12.1-1.fc17 (2013-0057)
2013-01-21 00:00:00
Mandriva Linux Security Advisory : php-ZendFramework (MDVSA-2013:115)
2013-04-20 00:00:00
openvas
openvas
Fedora Update for php-ZendFramework FEDORA-2013-0057
2013-01-21 00:00:00
Debian: Security Advisory (DSA-2602-1)
2013-01-07 00:00:00
Fedora Update for php-ZendFramework FEDORA-2013-0063
2013-01-21 00:00:00
ubuntucve
ubuntucve
fedora
fedora
[SECURITY] Fedora 18 Update: php-ZendFramework-1.12.1-1.fc18
2013-01-20 03:02:33
[SECURITY] Fedora 17 Update: php-ZendFramework-1.12.1-1.fc17
2013-01-20 03:09:02
[SECURITY] Fedora 16 Update: php-ZendFramework-1.12.1-1.fc16
2013-01-20 03:08:19
github
github
Zend Framework XXE Vulnerability
2022-05-17 05:10:46
Several Zend Products Vulnerable to XXE and XEE attacks
2022-05-14 00:56:24
Several Zend Products Vulnerable to XXE and XEE attacks
2022-05-14 00:56:24
securityvulns
securityvulns
[SECURITY] [DSA 2602-1] zendframework security update
2013-01-10 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2013-01-10 00:00:00
[SECURITY] [DSA 3265-1] zendframework security update
2015-06-08 00:00:00
debian
debian
[SECURITY] [DSA 2602-1] zendframework security update
2013-01-08 18:23:03
[SECURITY] [DSA 3265-2] zendframework regression update
2015-05-24 11:55:24
[SECURITY] [DSA 3265-1] zendframework security update
2015-05-20 09:37:25
cvelist
cvelist
osv
osv
Zend Framework XXE Vulnerability
2022-05-17 05:10:46
zendframework - XML external entity inclusion
2013-01-08 00:00:00
Several Zend Products Vulnerable to XXE and XEE attacks
2022-05-14 00:56:24
cve
cve
nvd
nvd
veracode
veracode
XML External Entity (XXE) Attacks
2017-07-31 00:02:04