Read the docs

Xmlbeam

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Xmlbeam records in CISA KEV

No Xmlbeam vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Xmlbeam 1 record MEDIUM

Records

1 record in Xmlbeam · all components

TI-2018-01164 CVE-2018-1259 · GHSA-m929-7fr6-cvjg

XML external entity injection in Pivotal Spring Data Commons

Priority MEDIUM 41

Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a property binder vulnerability caused by improper restriction of XML exte…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04843 Published 2018-05-11 Fixed in 1.13.12, 2.0.7 CWE-611
Open these records in search →