Web.Service.SAX.Injection

Release Date Sep 15, 2009
Severity medium
Impact System compromise
Description This indicates an attack attempt to exploit a SAX-injection vulnerability in Web Services which communicate through the use of SOAP requests. The vulnerability is a result of the application's failure to properly sanitize user input before using it in web services. As a result, a remote attacker can send a crafted request to execute a function defined in the web service definition language (WSDL) file.
Affected Products All web application environments are susceptible to SAX injection.
Recommended Actions The signature can be enabled to block this traffic.
Coverage IPS VCM

Fortinet