CWE-643: XPath Injection
The product uses external input to dynamically construct an XPath expression used to retrieve data from an XML database, but it does not neutralize or incorrectly neutralizes that input.
Also known as Improper Neutralization of Data within XPath Expressions.
A kind of CWE-943 NoSQL Injection, NoSQLi.
From the CWE List. © The MITRE Corporation.
Newest
- apache software foundation hertzbeat Apache HertzBeat: incomplete XPath expression validation in aliasFields 6.5 Medium
- watchguard fireware os Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets 8.7 High
- opnsense core OPNsense: XPath injection in MVC safe-delete 4.3 Medium
- opnsense core OPNsense: XPATH Injection can disclose any secret in config.xml 7.1 High
- ibm cloud pak for business automation Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026. 6.5 Medium
- timlegge xml::sig, xml\ \ +1 more XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup 9.1 Critical
- plesk Plesk contains an XPath injection vulnerability in the APS Application Catalog search... 9.9 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 more BIG-IP Configuration utility vulnerability 7.1 High
- apache hertzbeat Apache HertzBeat: Uncontrolled Resource Consumption via Crafted XPath Expressions 8.8 High
- huggingface smolagents, huggingface/smolagents +1 more XPath Injection in Hugging Face Smolagents search_item_ctrl_f Function 5.4 Medium
- cisco firepower management center, secure firewall management center +1 more Cisco Secure Firepower Management Center Software XPATH Injection Vulnerability 4.9 Medium
- ibm aspera console IBM Aspera Console XPath injection 4.3 Medium
- composio, composiohq composiohq/composio +1 more SSRF in composiohq/composio 6.8 Medium
- juniper j-web, junos, junos os +2 more Junos OS: J-Web: An unauthenticated, network-based attacker can perform XPATH injection attack against a device. 7.7 High
- netentsec application security gateway, ns-asg application security gateway +1 more Netentsec NS-ASG Application Security Gateway naccheck.php xpath injection 4.3 Medium
- netentsec application security gateway, ns-asg application security gateway +1 more Netentsec NS-ASG Application Security Gateway resetpwd.php xpath injection 4.3 Medium
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0, dynamics 365 (on-premises) version 9.1 +2 more Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability 6.5 Medium
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0, dynamics 365 (on-premises) version 9.1 +2 more Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability 6.5 Medium
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0, dynamics 365 (on-premises) version 9.1 +2 more Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability 6.5 Medium
- b. braun melsungen ag data module compactplus, spacecom, battery pack with wi-fi +1 more +3 more B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus 7.5 High