Sync

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Sync records in CISA KEV

No Sync vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Oxygen Xml Editor · all components

TI-2019-14559 CVE-2019-20191 · GHSA-wrcc-xjp4-3f52

LOW 35

Oxygen XML Editor 21.1.1 allows XXE to read any file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01145 Published 2020-03-16 No fix listed CWE-611

TI-2021-21519 CVE-2021-46827 · GHSA-rq7j-w5gx-99gf

LOW 28

An issue was discovered in Oxygen XML WebHelp before 22.1 build 2021082006 and 23.x before 23.1 build 2021090310.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00467 Published 2022-07-13 No fix listed CWE-79