Xmlbeans

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-23926 Jan 14, 15:15 Maven CRITICAL PATCH Act Now

The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Apache Information Disclosure Debian Oracle Debian Linux +7

NVD

CVSS 3.1

9.1

EPSS

6.2%

CVE-2021-23926 Maven

EPSS 6% CVSS 9.1

CRITICAL PATCH Act Now

The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Apache Information Disclosure Debian +9

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy