Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Adobe Commerce/Magento "CosmicSting" XXE (CVE-2024-34102) Critical Ektron CMS multiple vulnerabilities High JavaMelody XML External Entity (XXE) vulnerability High JBoss Seam remoting vulnerabilities High Jolokia XML External Entity (XXE) vulnerability High MantisBT multiple security issues High OpenCms Chemistry Solr XML External Entity (XXE) vulnerability (CVE-2023-42346) High OpenCms Chemistry XML External Entity (XXE) vulnerability (CVE-2023-42344) High OpenCms Solr XML External Entity (XXE) vulnerability High Oracle Business Intelligence Convert XXE CVE-2019-2767 High Oracle Business Intelligence ReportTemplateService XXE (CVE-2021-2400) High Oracle Business Intelligence ReportTemplateService XXE CVE-2019-2616 High Oracle Weblogic T3 XXE (CVE-2019-2647) High Oracle Weblogic T3 XXE (CVE-2019-2888) High Parallels Plesk SSO XML External Entity and Cross-site scripting High SAML Consumer Service XML entity injection (XXE) High SAP BO BIP XXE (CVE-2022-28213) High SAP IGS XXE (CVE-2018-2392, CVE-2018-2393) High XML entity injection High XML external entity injection High XML external entity injection (variant) High XML external entity injection and XML injection High XML External Entity Injection via external file High XML external entity injection via File Upload High XML quadratic blowup denial of service attack High XXE in Ivanti Connect Secure, Policy Secure and Neurons (CVE-2024-22024) Medium Zabbix 1.8.x-2.2.x Local File Inclusion via XXE Attack High Zend Framework local file disclosure via XXE injection High
