{"id":"CVE-2025-52162","aliases":["EUVD-2025-21899","GHSA-7h6c-r5x6-jgc8"],"status":"published","title":"agorum Software GmbH Agorum core open v11.9.2 \u0026 v11.10.1 was discovered to contain an XML...","description":"agorum Software GmbH Agorum core open v11.9.2 \u0026 v11.10.1 was discovered to contain an XML External Entity (XXE) via the RSSReader endpoint. This vulnerability allows attackers to access sensitive data via providing a crafted XML input.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00253,"percentile":0.16919,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-611"],"published":"2025-07-18T00:00:00Z","modified":"2026-07-05T01:21:56Z","references":[{"url":"https://herolab.usd.de/security-advisories/usd-2025-0024/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-52162"},{"url":"https://herolab.usd.de/security-advisories/usd-2025-0024"},{"url":"http://agorum.com"},{"url":"https://github.com/advisories/GHSA-7h6c-r5x6-jgc8"}],"sources":{"cve":[{"id":"CVE-2025-52162","description":"agorum Software GmbH Agorum core open v11.9.2 \u0026 v11.10.1 was discovered to contain an XML External Entity (XXE) via the RSSReader endpoint. This vulnerability allows attackers to access sensitive data via providing a crafted XML input.","status":"published","published":"2025-07-18T00:00:00Z","modified":"2026-07-05T01:03:04.078Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:32:31.309974Z"}],"euvd":[{"id":"EUVD-2025-21899","description":"agorum Software GmbH Agorum core open v11.9.2 \u0026 v11.10.1 was discovered to contain an XML External Entity (XXE) via the RSSReader endpoint. This vulnerability allows attackers to access sensitive data via providing a crafted XML input.","status":"published","published":"2025-07-18T00:00:00Z","modified":"2026-07-05T01:03:04Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T18:20:15.656487Z"}],"ghsa":[{"id":"GHSA-7h6c-r5x6-jgc8","title":"agorum Software GmbH Agorum core open v11.9.2 \u0026 v11.10.1 was discovered to contain an XML...","description":"agorum Software GmbH Agorum core open v11.9.2 \u0026 v11.10.1 was discovered to contain an XML External Entity (XXE) via the RSSReader endpoint. This vulnerability allows attackers to access sensitive data via providing a crafted XML input.","status":"published","published":"2025-07-18T18:30:29Z","modified":"2025-07-18T21:31:32Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T15:03:03.949606Z"}],"nvd":[{"id":"CVE-2025-52162","description":"agorum Software GmbH Agorum core open v11.9.2 \u0026 v11.10.1 was discovered to contain an XML External Entity (XXE) via the RSSReader endpoint. This vulnerability allows attackers to access sensitive data via providing a crafted XML input.","status":"published","published":"2025-07-18T17:15:44.247Z","modified":"2026-07-05T01:21:56.16Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:11:18.782156Z"}]}}