漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
HCL AppScan Source before 9.03.13 is susceptible to XML External Entity (XXE) attacks in multiple locations. In particular, an attacker can send a specially crafted .ozasmt file to a targeted victim and ask the victim to open it. When the victim imports the .ozasmt file in AppScan Source, the content of any file in the local file system (to which the victim as read access) can be exfiltrated to a remote listener under the attacker's control. The product does not disable external XML Entity Processing, which can lead to information disclosure and denial of services attacks.
漏洞信息
N/A
漏洞
N/A
漏洞
HCL Technologies AppScan Source 代码问题漏洞
漏洞信息
HCL Technologies AppScan Source是印度HCL Technologies公司的一套动态分析测试工具，它主要用于Web安全测试。 HCL Technologies AppScan Source 9.03.13之前版本中存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。
漏洞信息
N/A
漏洞
N/A