| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
 | Parsing of external XML entities can be exploited to retrieve files or make HTTP requests on the target network | 18 Jun 201322:44 | – | atlassian |
 | CVE-2012-2926 | 17 May 201200:00 | – | circl |
 | CVE-2012-2926 | 22 May 201215:00 | – | cvelist |
 | Atlassian Tempo 6.4.3 / JIRA 5.0.0 / Gliffy 3.7.0 - XML Parsing Denial of Service | 17 May 201200:00 | – | exploitdb |
 | Atlassian JIRA < 5.0.1 XML Parsing DoS | 1 Jun 201200:00 | – | nessus |
| Atlassian Jira < 5.0.1 Arbitrary File Reads | 14 Mar 202300:00 | – | nessus |
 | Atlassian Crowd XML Entity Expansion Remote File Access | 27 Jun 201208:21 | – | metasploit |
 | CVE-2012-2926 | 22 May 201215:55 | – | nvd |
 | Atlassian Crowd XML Parsing Denial of Service Vulnerability | 11 Jul 201200:00 | – | openvas |
| Atlassian Crowd XML Parser Vulnerability (JRA-27719) - Active Check | 11 Jul 201200:00 | – | openvas |
10
Node
OR
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| aut:name | request body | crowd/services | XML External Entity (XXE) vulnerability in Jira/Crowd SOAP endpoint that can exfiltrate local files via crafted XML payload. | CWE-611 |
| aut:token | request body | crowd/services | XML External Entity (XXE) vulnerability in Jira/Crowd SOAP endpoint that can exfiltrate local files via crafted XML payload. | CWE-611 |
| aut:encryptedCredential | request body | crowd/services | XML External Entity (XXE) vulnerability in Jira/Crowd SOAP endpoint that can exfiltrate local files via crafted XML payload. | CWE-611 |
| urn:addAllPrincipals | request body | crowd/services | XML External Entity (XXE) vulnerability in Jira/Crowd SOAP endpoint that can exfiltrate local files via crafted XML payload. | CWE-611 |
| urn:SecurityServer | request body | crowd/services | XML External Entity (XXE) vulnerability in Jira/Crowd SOAP endpoint that can exfiltrate local files via crafted XML payload. | CWE-611 |
| urn:in0 | request body | crowd/services | XML External Entity (XXE) vulnerability in Jira/Crowd SOAP endpoint that can exfiltrate local files via crafted XML payload. | CWE-611 |
| urn:in1 | request body | crowd/services | XML External Entity (XXE) vulnerability in Jira/Crowd SOAP endpoint that can exfiltrate local files via crafted XML payload. | CWE-611 |
| soap:SOAPPrincipalWithCredential | request body | crowd/services | XML External Entity (XXE) vulnerability in Jira/Crowd SOAP endpoint that can exfiltrate local files via crafted XML payload. | CWE-611 |
| soap:Envelope | request body | crowd/services | XML External Entity (XXE) vulnerability in Jira/Crowd SOAP endpoint that can exfiltrate local files via crafted XML payload. | CWE-611 |
| soap:Body | request body | crowd/services | XML External Entity (XXE) vulnerability in Jira/Crowd SOAP endpoint that can exfiltrate local files via crafted XML payload. | CWE-611 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
16 Jun 2026 23:42Current
9High risk
Vulners AI Score9
CVSS 26.4
CVSS 3.19.1
EPSS0.66578