CWE-611: XXE
The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.
Also known as Improper Restriction of XML External Entity Reference.
A kind of CWE-610 Externally Controlled Reference to a Resource in Another Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- jenkins performance publisher, jenkins project performance publisher plugin +1 moreJenkins Performance Publisher Plugin vulnerable to XML external entity (XXE) attacks8.2 High
- jenkins visual studio code metrics, jenkins project visual studio code metrics plugin +1 moreJenkins Visual Studio Code Metrics Plugin vulnerable to XML external entity (XXE) attacks8.2 High
- jenkins crap4j, jenkins project crap4j plugin +1 moreJenkins Crap4J Plugin vulnerable to XML external entity (XXE) attacks7.5 High
- visam vbase, vbase automation base +1 moreCVE-2022-462865.5 Medium
- visam vbase, vbase automation base +1 moreCVE-2022-454685.5 Medium
- visam vbase, vbase automation base +1 moreCVE-2022-451215.5 Medium
- visam vbase, vbase automation base +1 moreCVE-2022-416965.5 Medium
- visam vbase, vbase automation base +1 moreCVE-2022-435125.5 Medium
- visam vbase, vbase automation base +1 moreCVE-2022-463005.5 Medium
- wechat sdk python project sdk python, zwczou wechat sdk python +1 morezwczou WeChat SDK Python to_xml xml external entity reference6.3 Medium
- jenkins project absint a³ plugin, jenkins absint a3 +1 moreJenkins AbsInt a³ Plugin XML External Entity Reference vulnerability7.1 High
- ibm aspera faspexIBM Aspera Faspex XML external entity injection9.9 Critical
- sap netweaver (sap enterprise portal), netweaver enterprise portal +1 moreXML External Entity (XXE) vulnerability in SAP NetWeaver (SAP Enterprise Portal)6.8 Medium
- 3ds enovia live collaborationENOVIA Live Collaboration V6R2013xE is affected by an XML External Entity injection (XXE) vulnerability6.8 Medium
- geopython owslibXML External Entity (XXE) Injection in OWSLib8.2 High
- xwiki, xwiki xwiki-platform +1 moreData leak through a XAR import XXE attack in xwiki-platform-xar-model7.7 High
- geonodeXML External Entity (XXE) injection in GeoServer style upload functionality6.5 Medium
org.neo4j.procedure:apocMavenXML External Entity (XXE) vulnerability in apoc.import.graphml5.9 Medium- bstek uruleAn XML External Entity (XXE) vulnerability in urule v2.1.7 allows attackers to execute arbitrary...9.8 Critical
- libimobiledevice libplistUIKit0 libplist XML xplist.c plist_from_xml xml external entity reference5.5 Medium
- php-saml-sp project php-saml-spphp-saml-sp before 1.1.1 and 2.x before 2.1.1 allows reading arbitrary files as the webserver...6.5 Medium
- vmware vrealize orchestrator, vrealize automation +1 moreVMware vRealize Orchestrator contains an XML External Entity (XXE) vulnerability. A malicious...8.8 High
- 3breadt dd-plist3breadt dd-plist xml external entity reference5.3 Medium
- java-xmlbuilder project java-xmlbuilderjava-xmlbuilder xml external entity reference5.5 Medium
- openkmAn issue discovered in OpenKM v6.3.10 allows attackers to obtain sensitive information via the...7.5 High
- fortinet fortinac, fortinac-f +1 moreAn improper restriction of xml external entity reference in Fortinet FortiNAC version 9.4.0...6.9 Medium
- clamav, cisco secure endpoint, secure endpoint private cloud +1 more +3 moreOn Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A...5.3 Medium
- neo4j apoc, awesome procedures on cyper +1 moreXML External Entity (XXE) vulnerability in apoc.import.graphml5.9 Medium
- fujitsu tsclinical define.xml generator, tsclinical metadata desktop tools, fujitsu limited tsclinical define.xml generator and tsclinical metadata desktop tools +2 moreImproper restriction of XML external entity reference (XXE) vulnerability exists in tsClinical Define.xml Generator all versions (v1.0.0 to v1.4.0) and tsClinical Metadata Desktop Tools Version 1.0.3…7.4 High
- ureport project ureportXML External Entity Reference in ureport7.8 High
- apache nifiApache NiFi: Improper Restriction of XML External Entity References in ExtractCCDAAttributes7.5 High
- mojoportalMojoportal v2.7 was discovered to contain an authenticated XML external entity (XXE) injection...8.8 High
- talend remote engine gen 2XML External Entity (XXE) vulnerability in Talend Remote Engine Gen 2 before R2022-09.7.8 High
- ibm tivoli workload schedulerIBM Tivoli Workload Scheduler XML external entity injection7.1 High
- ibm tivoli workload schedulerIBM Tivoli Workload Scheduler XML external entity injection10.0 Critical
- netcad keosNetcad KEOS 1.0 is vulnerable to XML External Entity (XXE) resulting in SSRF with XXE (remote).9.8 Critical
- omron cx-motion proImproper restriction of XML external entity reference (XXE) vulnerability exists in OMRON CX...5.5 Medium
- jenkins testcomplete support, jenkins project testcomplete support plugin +1 moreXML Entity Expansion in Jenkins TestComplete support Plugin9.8 Critical
- jenkins mstest, jenkins project mstest plugin +1 moreXML external entity vulnerability on agents in Jenkins MSTest Plugin9.8 Critical
- jenkins semantic versioning, jenkins project semantic versioning plugin +1 moreXML external entity reference vulnerability on agents in Jenkins Semantic Versioning Plugin9.8 Critical
- jenkins semantic versioning, jenkins project semantic versioning plugin +1 moreAgent-to-controller security bypass in Jenkins Semantic Versioning Plugin9.8 Critical
- openstack swift, debian linux +1 moreOpenStack Swift XML external entities (XXE) Injection6.5 Medium
- oracle web services managerVulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component:...8.1 High
- zohocorp manageengine exchange reporter plusZoho ManageEngine Exchange Reporter Plus before 5708 allows attackers to conduct XXE attacks.7.5 High
- bluecatnetworks device registration portalBlueCat Device Registration Portal 2.2 allows XXE attacks that exfiltrate single-line files. A...7.5 High
- talend open studio for mdm, open studio +1 moreTalend Open Studio for MDM XML xml external entity reference5.5 Medium
- kelvinmo simplexrdkelvinmo simplexrd simplexrd.class.php xml external entity reference5.5 Medium
- e-contract dsspe-Contract dssp SignResponseVerifier.java checkSignResponse xml external entity reference5.5 Medium
- gturri axmlrpcgturri aXMLRPC ResponseParser.java ResponseParser xml external entity reference5.5 Medium
- bonitasoft bonita-connector-webservice, webservice connector +1 morebonitasoft bonita-connector-webservice SecureWSConnector.java TransformerConfigurationException xml external entity reference5.5 Medium
- Show moreLoading…