Vendors / jgraph Records 40 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 13
Exploited now jgraph records in CISA KEV No jgraph vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 47
In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert() is missing flags to prevent XML External Entity (XXE) attacks, as demonstrated by /ServerView.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02899 · Published 2018-02-24 · Partial fix · 3.7.6 CWE-611
Priority LOW 30
An issue was discovered in mxGraph through 4.0.0, related to the "draw.io Diagrams" plugin before 8.3.14 for Confluence and other products.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01503 · Published 2019-07-01 · Fixed in 4.0.1 CWE-20
Priority LOW 28
mxGraph v4.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the setTooltips() function.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00713 · Published 2022-10-11 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
4 13 20 3 0
