Логотип exploitDog
bind:CVE-2012-3489
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2012-3489

Количество 6

Количество 6

ubuntu логотип

CVE-2012-3489

почти 13 лет назад

The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content that triggers a parsing error, via an XML value that refers to (1) a DTD or (2) an entity, related to an XML External Entity (aka XXE) issue.

CVSS3: 6.5
EPSS: Низкий
redhat логотип

CVE-2012-3489

почти 13 лет назад

The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content that triggers a parsing error, via an XML value that refers to (1) a DTD or (2) an entity, related to an XML External Entity (aka XXE) issue.

CVSS2: 2.7
EPSS: Низкий
nvd логотип

CVE-2012-3489

почти 13 лет назад

The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content that triggers a parsing error, via an XML value that refers to (1) a DTD or (2) an entity, related to an XML External Entity (aka XXE) issue.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2012-3489

почти 13 лет назад

The xml_parse function in the libxml2 support in the core server compo ...

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-fpq4-mcf9-c5w9

около 3 лет назад

The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content that triggers a parsing error, via an XML value that refers to (1) a DTD or (2) an entity, related to an XML External Entity (aka XXE) issue.

CVSS3: 6.5
EPSS: Низкий
oracle-oval логотип

ELSA-2012-1263

почти 13 лет назад

ELSA-2012-1263: postgresql and postgresql84 security update (MODERATE)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2012-3489

The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content that triggers a parsing error, via an XML value that refers to (1) a DTD or (2) an entity, related to an XML External Entity (aka XXE) issue.

CVSS3: 6.5
1%
Низкий
почти 13 лет назад
redhat логотип
CVE-2012-3489

The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content that triggers a parsing error, via an XML value that refers to (1) a DTD or (2) an entity, related to an XML External Entity (aka XXE) issue.

CVSS2: 2.7
1%
Низкий
почти 13 лет назад
nvd логотип
CVE-2012-3489

The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content that triggers a parsing error, via an XML value that refers to (1) a DTD or (2) an entity, related to an XML External Entity (aka XXE) issue.

CVSS3: 6.5
1%
Низкий
почти 13 лет назад
debian логотип
CVE-2012-3489

The xml_parse function in the libxml2 support in the core server compo ...

CVSS3: 6.5
1%
Низкий
почти 13 лет назад
github логотип
GHSA-fpq4-mcf9-c5w9

The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content that triggers a parsing error, via an XML value that refers to (1) a DTD or (2) an entity, related to an XML External Entity (aka XXE) issue.

CVSS3: 6.5
1%
Низкий
около 3 лет назад
oracle-oval логотип
ELSA-2012-1263

ELSA-2012-1263: postgresql and postgresql84 security update (MODERATE)

почти 13 лет назад

Уязвимостей на страницу