CWE-611

An XML External Entity (XXE) vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Applicat

JavaMelody before 1.74.0 has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java.

An XML External Entity (XXE) vulnerability exists in iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20.

In version from 3.5.Beta1 to 3.5.3 of Eclipse Vert.x, the OpenAPI XML type validator creates XML parsers without taking

jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE.

An issue was discovered in weixin-java-tools v3.2.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWx

c3p0 0.9.5.2 allows XXE in extractXmlConfigFromInputStream in com/mchange/v2/c3p0/cfg/C3P0ConfigXmlUtils.java during ini

LatexDraw version <=4.0 contains a XML External Entity (XXE) vulnerability in SVG parsing functionality that can result

An exploitable unauthenticated XML external injection vulnerability was identified in FocalScope v2416. A unauthenticate

An XXE vulnerability within WireMock before 2.16.0 allows a remote unauthenticated attacker to access local files and in

Multiple XML external entity (XXE) vulnerabilities in the (1) CCRC WAN Server / CM Server, (2) Perl CC/CQ integration tr

XML External Entity (XXE) vulnerability in the web service in Dialogic PowerMedia XMS before 3.5 SU2 allows remote attac

OCS Inventory 2.4.1 lacks a proper XML parsing configuration, allowing the use of external entities. This issue can be e

An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below,

SolarWinds SFTP/SCP server through 2018-09-10 is vulnerable to XXE via a world readable and writable configuration file

XXE in GE Proficy Cimplicity GDS versions 9.0 R2, 9.5, 10.0

Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity (XXE) vulnerability, allowing an att

Square Open Source Retrofit version Prior to commit 4a693c5aeeef2be6c7ecf80e7b5ec79f6ab59437 contains a XML External Ent

It was found that the JAXP implementation used in JBoss EAP 7.0 for XSLT processing is vulnerable to code injection. An

FrostWire version <= frostwire-desktop-6.7.4-build-272 contains a XML External Entity (XXE) vulnerability in Man in the

Anyplace version before commit 80359b4 contains a XML External Entity (XXE) vulnerability in Man in the middle on map AP

runelite version <= runelite-parent-1.4.23 contains a XML External Entity (XXE) vulnerability in Man in the middle runsc

bw-calendar-engine version <= bw-calendar-engine-3.12.0 contains a XML External Entity (XXE) vulnerability in IscheduleC

Commsy version 9.0.0 is vulnerable to XXE attacks in the configuration import functionality resulting in denial of servi

Jenkins PMD Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, all

Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build proce

Jenkins DRY Plugin 2.49 and earlier processes XML external entities in files it parses as part of the build process, all

Jenkins FindBugs Plugin 4.71 and earlier processes XML external entities in files it parses as part of the build process

Jenkins Warnings Plugin 4.64 and earlier processes XML external entities in files it parses as part of the build process

A XML external entity (XXE) vulnerability exists in the import.cgi of the web interface component of the Schneider Elect

XML external entity (XXE) vulnerability in java/org/jasig/cas/util/SamlUtils.java in Jasig CAS server before 3.4.12.1 an

Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to an XML external entities (XXE). XXEs are a

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka

The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to a XML external entity (XXE) exploit, which

An XXE vulnerability in LeviStudioU, Versions 1.8.29 and 1.8.44 can be exploited when the application processes speciall

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka

Logisim Evolution version 2.14.3 and earlier contains an XML External Entity (XXE) vulnerability in Circuit file loading

It was found that the JAXP implementation used in JBoss EAP 7.0 for SAX and DOM parsing is vulnerable to certain XXE fla

An XML External Entity (XXE) vulnerability exists in the Charles 4.2.7 import/export setup option. If a user imports a "

Jenkins CCM Plugin 3.1 and earlier processes XML external entities in files it parses as part of the build process, allo

Jenkins Android Lint Plugin 2.5 and earlier processes XML external entities in files it parses as part of the build proc

Jenkins JUnit Plugin 1.23 and earlier processes XML external entities in files it parses as part of the build process, a

IBM Content Navigator 2.0 and 3.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data

An XXE vulnerability in the OPC UA Java and .NET Legacy Stack can allow remote attackers to trigger a denial of service.

IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to a XML External Entity Injection (XXE) attack when pr

In Apache jUDDI 3.2 through 3.3.4, if using the WADL2Java or WSDL2Java classes, which parse a local or remote XML docume

An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.

An exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2.6.0. A specially crafte

An exploitable XML external entity vulnerability exists in the reporting functionality of SAP BPC. A specially crafted X

Dell EMC Data Protection Advisor, versions 6.2, 6,3, 6.4, 6.5 and Dell EMC Integrated Data Protection Appliance (IDPA) v