CVE-2019-11068

🗓️ 10 Apr 2019 19:38:18Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 527 Views

libxslt through 1.1.33 allows bypass of a protection mechanism

Reporter	Title	Published	Views	Family All 222
ibm	Security Bulletin: IBM MQ Appliance is affected by libxslt vulnerabilities (CVE-2019-11068, CVE-2019-18197)	3 Mar 202116:05	–	ibm
ibm	Security Bulletin: IBM QRadar Network Security is affected by multiple vulnerabilities.	19 Jul 202221:43	–	ibm
ibm	Security Bulletin: WebSphere Cast Iron and App Connect Professional are affected by vulnerabilities in Pacemaker, ImageMagick, gd-libgd, libxslt, cURL libcurl , Ghostscript.	21 Feb 202204:39	–	ibm
freebsd	libxslt -- security framework bypass	10 Apr 201900:00	–	freebsd
nessus	Amazon Linux 2 : libxslt (ALAS-2020-1535)	28 Oct 202000:00	–	nessus
nessus	Amazon Linux AMI : libxslt (ALAS-2019-1241)	26 Jul 201900:00	–	nessus
nessus	Amazon Linux AMI : libxslt (ALAS-2020-1464) (deprecated)	19 Dec 202000:00	–	nessus
nessus	Amazon Linux AMI : libxslt (ALAS-2021-1463)	14 Jan 202100:00	–	nessus
nessus	Alibaba Cloud Linux 3 : 0062: libxslt (ALINUX3-SA-2022:0062)	14 May 202500:00	–	nessus
nessus	AlmaLinux 8 : libxslt (ALSA-2020:4464)	9 Feb 202200:00	–	nessus

NVD

Node

xmlsoft libxsltRange≤1.1.33

Node

canonical ubuntu_linuxMatch12.04esm

canonical ubuntu_linuxMatch14.04lts

canonical ubuntu_linuxMatch16.04lts

canonical ubuntu_linuxMatch18.04lts

canonical ubuntu_linuxMatch18.10

Node

debian debian_linuxMatch8.0

Node

fedoraproject fedoraMatch29

fedoraproject fedoraMatch30

Node

oracle jdkMatch8.0update_221

Node

netapp active_iq_unified_managerMatch-vmware_vsphere

netapp active_iq_unified_managerMatch-windows

netapp cloud_backupMatch-

netapp e-series_santricity_management_plug-insMatch-vmware_vcenter

netapp e-series_santricity_os_controllerRange11.0–11.70.2

netapp e-series_santricity_storage_managerMatch-

netapp e-series_santricity_unified_managerMatch-

netapp e-series_santricity_web_services_proxyMatch-

netapp element_softwareMatch-

netapp hci_management_nodeMatch-

netapp oncommand_insightMatch-

netapp oncommand_workflow_automationMatch-

netapp plug-in_for_symantec_netbackupMatch-

netapp santricity_unified_managerMatch-

netapp snapmanagerMatch-sap

netapp snapmanagerMatch--oracle

netapp solidfireMatch-

netapp steelstore_cloud_integrated_storageMatch-

Node

opensuse leapMatch15.0

opensuse leapMatch15.1

opensuse leapMatch42.3

Source	Link
openwall	www.openwall.com/lists/oss-security/2019/04/22/1
lists	www.lists.opensuse.org/opensuse-security-announce/2019-06/msg00025.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GCOAX2IHUMKCM3ILHTMGLHCDSBTLP2JU/
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
lists	www.lists.opensuse.org/opensuse-security-announce/2019-08/msg00001.html
usn	www.usn.ubuntu.com/3947-1/
usn	www.usn.ubuntu.com/3947-2/
openwall	www.openwall.com/lists/oss-security/2019/04/23/5
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SK4YNISS22MJY22YX5I6V2U63QZAUEHA/
lists	www.lists.opensuse.org/opensuse-security-announce/2019-05/msg00053.html

17 Jun 2026 02:12Current

9.4High risk

Vulners AI Score9.4

CVSS 27.5

CVSS 3.19.8

EPSS0.05089

SSVC