CVE-2023-37497 (unica)

Aug. 3, 2023, 10:15 p.m. |

National Vulnerability Database web.nvd.nist.gov

The Unica application exposes an API which accepts arbitrary XML input. By manipulating the given XML, an authenticated attacker with certain rights can successfully perform XML External Entity attacks (XXE) against the backend service.

api application attacks backend cve external input rights service xml xxe

Visit resource

More from web.nvd.nist.gov / National Vulnerability Database

CVE-2023-45955 (lightstrip_firmware) 6 months, 1 week ago | web.nvd.nist.gov

attackers cve denial of service issue +1

CVE-2023-40101 (android) 6 months, 1 week ago | web.nvd.nist.gov

android check collapse cve +7

CVE-2023-21377 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bypass cve disclosure +8

CVE-2023-21380 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bluetooth buffer buffer overflow +9

CVE-2023-21382 (android) 6 months, 1 week ago | web.nvd.nist.gov

access android check cve +11

CVE-2023-21381 (android) 6 months, 1 week ago | web.nvd.nist.gov

android arbitrary code code code execution +10

CVE-2023-21385 (android) 6 months, 1 week ago | web.nvd.nist.gov

android corruption cve disclosure +7

CVE-2023-21387 (android) 6 months, 1 week ago | web.nvd.nist.gov

android backup bypass cve +11

CVE-2023-21389 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bypass check cve +10

Principal Engineer - DLP Endpoint Security

@ Netskope | Bengaluru, Karnataka, India

View on infosec-jobs.com

Security Consultant (m/w/d)

@ Deutsche Telekom | Berlin, Deutschland

View on infosec-jobs.com

Security Engineer

@ IDEMIA | Haarlem, NL, 2031 CC

View on infosec-jobs.com

CyberSecurity Forensics and Incident Response Analyst

@ Bosch Group | Pittsburgh, PA, United States

View on infosec-jobs.com

Cyber MS MDR - Sr Associate

@ KPMG India | Bengaluru, Karnataka, India

View on infosec-jobs.com

Senior Lead Cybersecurity Architect-Threat modeling, Cryptography

@ JPMorgan Chase & Co. | India

View on infosec-jobs.com

View more jobs

all InfoSec news

CVE-2023-37497 (unica)

More from web.nvd.nist.gov / National Vulnerability Database

Jobs in InfoSec / Cybersecurity

Principal Engineer - DLP Endpoint Security

Security Consultant (m/w/d)

Security Engineer

CyberSecurity Forensics and Incident Response Analyst

Cyber MS MDR - Sr Associate

Senior Lead Cybersecurity Architect-Threat modeling, Cryptography