CVE-2016-4311

概要

参考情報

• hyp3rlinx.altervista.org/advisories/WSO2-IDENTITY-SERVER-v5.1.0-XML-External-Entity.txt · Exploit
• packetstormsecurity.com/files/138329/WSO2-Identity-Server-5.1.0-XML-Injection.html · Exploit
• securityfocus.com/archive/1/539199/100/0/threaded
• securityfocus.com/bid/92485 · Third Party Advisory
• exploit-db.com/exploits/40239 · Exploit
• docs.wso2.com/display/Security/Security+Advisory+WSO2-2016-0096 · Patch

identity server のその他の脆弱性

• CVE-2025-12737高 8.4The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This oversight allows a mal…
• CVE-2026-0637中 4.4When an Event Publisher output adapter is configured with irrelevant properties, the affected products log these properties. This logging oc…
• CVE-2025-15039緊急 9.4The Conditional Authentication (Adaptive Authentication) script does not correctly enforce the completion of all required authentication ste…
• CVE-2025-14779低 3.8The Secret Type Management REST API does not correctly isolate access controls when deleting a secret type. The on-delete cascade logic, whe…
• CVE-2025-13909中 4.3The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic…