TI-2019-04214 CVE-2019-5918 · GHSA-qm84-429w-3353
XML external entity injection in TIS Inc. Nablarch 5
Priority MEDIUM 43
Nablarch 5 (5, and 5u1 to 5u13) allows remote attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.
Nablarch Project
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Nablarch Project records in CISA KEVNo Nablarch Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in Nablarch · all components
TI-2019-04215 CVE-2019-5919 · GHSA-hmx6-gc2p-5p82
Broken or risky cryptographic algorithm in TIS Inc. Nablarch 5
Priority MEDIUM 41
An incomplete cryptography of the data store function by using hidden tag in Nablarch 5 (5, and 5u1 to 5u13) allows remote attackers to obtain information of the stored data, to register invalid value, or alter the value…