Vendors / Schweizerische Steuerkonferenz Schweizerische Steuerkonferenz Records 1 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Schweizerische Steuerkonferenz records in CISA KEV No Schweizerische Steuerkonferenz vulnerabilities are listed in CISA KEV.
Priority MEDIUM 61
When the XML is read from the codes in the PDF and parsed using a DocumentBuilder, the default settings of the DocumentBuilder allow for an XXE (XML External Entity) attack.
CVSS 4.0 MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.0041 · Published 2024-10-14 · No fix listed CWE-611
Open these records in search → All records by CVSS severity
Critical0 High0 Medium1 Low0 No CVSS0