Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2023-26559
Disclosure Date: April 14, 2023 (last updated October 08, 2023)
A directory traversal vulnerability in Oxygen XML Web Author before 25.0.0.3 build 2023021715 and Oxygen Content Fusion before 5.0.3 build 2023022015 allows an attacker to read files from a WEB-INF directory via a crafted HTTP request. (XML Web Author 24.1.0.3 build 2023021714 and 23.1.1.4 build 2023021715 are also fixed versions.)
0
Attacker Value
Unknown
CVE-2021-46827
Disclosure Date: July 13, 2022 (last updated February 24, 2025)
An issue was discovered in Oxygen XML WebHelp before 22.1 build 2021082006 and 23.x before 23.1 build 2021090310. An XSS vulnerability in search terms proposals (in online documentation generated using Oxygen XML WebHelp) allows attackers to execute JavaScript by convincing a user to type specific text in the WebHelp output search field.
0
Attacker Value
Unknown
CVE-2019-20191
Disclosure Date: March 16, 2020 (last updated February 21, 2025)
Oxygen XML Editor 21.1.1 allows XXE to read any file.
0
