Phpoffice Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Phpoffice Project records in CISA KEV

No Phpoffice Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Common · all components

TI-2018-10168 CVE-2018-14065 · GHSA-2853-hf2g-9843

MEDIUM 46

XMLReader.php in PHPOffice Common before 0.2.9 allows XXE.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02177 Published 2018-07-15 Fixed in 0.2.9 CWE-611