Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Cnblogs records in CISA KEVNo Cnblogs vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 64
PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity (XXE) references.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00425 · Published 2025-11-17 · No fix listed CWE-611
Priority MEDIUM 61
PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowing attackers to upload arbitrary files to arbitrary locations.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00427 · Published 2025-11-17 · No fix listed CWE-22
