XXE (XML External Entity Injection) org.apache.tika:tika-parsers Dependency in Crowd Data Center and Server

🗓️ 16 Jan 2026 18:27:26Reported by security-metrics-botType

High severity XML External Entity vulnerability in Crowd Data Center and Server; upgrade to 7.1.2.

Reporter	Title	Published	Views	Family All 97
GithubExploit	Exploit for CVE-2025-66516	8 Dec 202510:50	–	githubexploit
GithubExploit	Exploit for CVE-2025-66516	7 Dec 202503:16	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Apache Tika	6 Dec 202504:21	–	githubexploit
GithubExploit	Exploit for CVE-2025-66516	12 Dec 202504:28	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM SPSS Analytic Server is affected by XML External Entity injection vulnerability in Apache Tika (CVE-2025-54988)	27 Jan 202609:03	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Apache Tika, IBM Operations Analytics - Log Analysis is affected by XML External Entity (XXE) vulnerability	7 Apr 202617:07	–	ibm
IBM Security Bulletins	Security Bulletin: Critical XXE Vulnerability in Apache Tika Affecting Content Collector for Email, File Systems, and Microsoft SharePoint (CVE-2025-54988)	22 Jun 202607:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Tika	3 Apr 202616:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in Apache Tika Core and Parsers (CVE-2025-54988, CVE-2025-66516, CVE-2025-66516)	17 Apr 202605:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM OpenPages for Cloud Pak for Data is Vulnerable to Critical XXE in Apache Tika (CVE-2025-54988)	17 Feb 202607:33	–	ibm