Read the docs

Easyxml Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Easyxml Project records in CISA KEV

No Easyxml Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority MEDIUM 42

The parseXML function in Easy-XML 0.5.0 was discovered to have a XML External Entity (XXE) vulnerability which allows for an attacker to expose sensitive data or perform a denial of service (DOS) via a crafted external e…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01332 Published 2021-10-31 No fix listed CWE-611
Open these records in search →