Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.2Enterprise Architect is vulnerable to XML External Entity (XXE) injection in the XSLT Debugger feature.Oct 15, 2026
- High8.7Ellucian WebAdvisor 3.2 Unauthenticated XXE InjectionOct 15, 2026
- Critical9.6Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in privilege escalation.EPSS 0.5%Oct 13, 2026
- High8.7CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure.EPSS 0.3%Oct 13, 2026
- High8.6ColdFusion is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read.EPSS 0.5%Oct 13, 2026
- High8.2IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to an XML external ent…Oct 8, 2026
- Critical9.8OSGeo GeoServer Improper Restriction of XML External Entity Reference VulnerabilityKEVEPSS 60.5%Nov 25, 2025
- Critical9.8SysAid On-Prem Improper Restriction of XML External Entity Reference VulnerabilityKEVEPSS 64.7%May 7, 2025
- High7.5SysAid On-Prem Improper Restriction of XML External Entity Reference VulnerabilityKEVEPSS 42.6%May 7, 2025
- Critical9.8Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) VulnerabilityKEVEPSS 100.0%Jun 13, 2024
- High7.5North Grid Proself Improper Restriction of XML External Entity (XXE) Reference VulnerabilityKEVEPSS 3.5%Oct 18, 2023
- High7.5Citrix StoreFront Server XML External Entity (XXE) Processing VulnerabilityKEVEPSS 30.0%Aug 29, 2019
- High7.5In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources whilEPSS 7.1%Jun 24, 2019
- Critical9.8Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity ReferenceKEVEPSS 100.0%May 29, 2019
- Critical9.8A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request entity substitution, DTD validation, external DTD subset loadiEPSS 3.0%Feb 19, 2018
- Medium6.5SAP NetWeaver XML External Entity (XXE) VulnerabilityKEVEPSS 24.2%Nov 22, 2016
- Medium5.5libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but…EPSS 2.9%Nov 16, 2016
- Medium6.8expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote…EPSS 19.4%Jan 21, 2014
18 records · page 1 of 1
PreviousNext