Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.6Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in privilege escalation.Oct 13, 2026
- High8.6ColdFusion is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read.Oct 13, 2026
- Critical9.8OSGeo GeoServer Improper Restriction of XML External Entity Reference VulnerabilityKEVEPSS 60.5%Nov 25, 2025
- Critical9.8SysAid On-Prem Improper Restriction of XML External Entity Reference VulnerabilityKEVEPSS 64.7%May 7, 2025
- High7.5SysAid On-Prem Improper Restriction of XML External Entity Reference VulnerabilityKEVEPSS 42.6%May 7, 2025
- Critical9.8Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) VulnerabilityKEVEPSS 100.0%Jun 13, 2024
- High7.5North Grid Proself Improper Restriction of XML External Entity (XXE) Reference VulnerabilityKEVEPSS 3.5%Oct 18, 2023
- High7.5Citrix StoreFront Server XML External Entity (XXE) Processing VulnerabilityKEVEPSS 30.0%Aug 29, 2019
- High7.5In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU r…Jun 24, 2019
- Critical9.8Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity ReferenceKEVEPSS 100.0%May 29, 2019
- Critical9.8A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request entity substitution, DTD validation, external DTD…Feb 19, 2018
- Medium6.5SAP NetWeaver XML External Entity (XXE) VulnerabilityKEVEPSS 24.2%Nov 22, 2016
- Medium5.5libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but…Nov 16, 2016
- Medium6.8expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote…Jan 21, 2014
14 records · page 1 of 1
PreviousNext