Vendors / Xmlsec Project Records 1 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Xmlsec Project records in CISA KEV No Xmlsec Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 34
xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible information disclosure or denial of service
CVSS 3.0 HIGH 7.1· Local · No auth · User interaction · EPSS 0.01352 · Published 2017-07-13 · Partial fix CWE-611
Open these records in search → All records by CVSS severity
Critical0 High1 Medium0 Low0 No CVSS0