Signature Detail
Short Name |
HTTP:XML-EXTERNAL-ENTITY-INJ |
|---|---|
Severity |
Medium |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Multiple Product XML External Entity Injection |
Release Date |
2014/03/24 |
Update Number |
2356 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP:Multiple Product XML External Entity Injection
This signature detects attempts to exploit a known vulnerability through External Entity Injection in variuos products. A successful attack can lead to unauthorized information disclosure, denial of service, request forgery and security policies bypass.
References
- BugTraq: 65051
- CVE: CVE-2014-3490
- CVE: CVE-2014-0423
- CVE: CVE-2013-6429
- CVE: CVE-2013-6447
- CVE: CVE-2013-5014
- CVE: CVE-2010-2076
- CVE: CVE-2014-0002