Xmltooling Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Xmltooling Project records in CISA KEV

No Xmltooling Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Xmltooling 2 records LOW

Records

2 records in Xmltooling · all components

TI-2019-07043 CVE-2019-9628

The XMLTooling library all versions prior to V3.0.4, provided with the OpenSAML and…

LOW 37

The XMLTooling library all versions prior to V3.0.4, provided with the OpenSAML and Shibboleth Service Provider software, contains an XML parsing class.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02052 Published 2019-04-11 Will not fix CWE-755

TI-2015-00792 CVE-2015-0851 · GHSA-2px9-x675-rqf5

XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service Provider (SP)…

LOW 28

XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service Provider (SP), does not properly handle integer conversion exceptions, which allows remote attackers to cause a denial of service (crash) via schema…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02444 Published 2015-08-12 No fix listed CWE-189

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0