TI-2020-15287 CVE-2020-25020 · GHSA-wcp5-m52f-mhh5
MPXJ through 8.1.3 allows XXE attacks.
Priority MEDIUM 54
MPXJ through 8.1.3 allows XXE attacks.
Mpxj
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Mpxj records in CISA KEVNo Mpxj vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records
TI-2020-17989 CVE-2020-35460 · GHSA-p9j6-4pjr-gp48
common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in…
Priority LOW 34
common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writing of files to arbitrary locations.
TI-2022-20295 CVE-2022-41954 · GHSA-jf2p-4gqj-849g
Temporary File Information Disclosure Vulnerability
Priority LOW 15
MPXJ is an open source library to read and write project plans from a variety of file formats and databases.