Mpxj

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Mpxj records in CISA KEV

No Mpxj vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mpxj 3 records MEDIUM

Records

3 records in Mpxj · all components

TI-2020-15287 CVE-2020-25020 · GHSA-wcp5-m52f-mhh5

MPXJ through 8.1.3 allows XXE attacks.

MEDIUM 54

MPXJ through 8.1.3 allows XXE attacks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02591 Published 2020-08-29 Fixed in 8.1.4 CWE-611

TI-2020-17989 CVE-2020-35460 · GHSA-p9j6-4pjr-gp48

common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in…

LOW 34

common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writing of files to arbitrary locations.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01864 Published 2020-12-14 Fixed in 8.3.5 CWE-22

TI-2022-20295 CVE-2022-41954 · GHSA-jf2p-4gqj-849g

Temporary File Information Disclosure Vulnerability

LOW 15

MPXJ is an open source library to read and write project plans from a variety of file formats and databases.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00215 Published 2022-11-25 Fixed in 10.14.1 CWE-200

Open these records in search →

Critical	1
High	0
Medium	1
Low	1
No CVSS	0