EUVD-2021-1365

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

XMLBeans up to version 2.6.0 are vulnerable to malicious XML input and Entity Expansion attacks

Reporter	Title	Published	Views	Family All 73
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Spreadsheet Services is affected by security vulnerabilities	9 Aug 202116:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect embedded rules in IBM Business Automation Workflow	11 Jan 202413:32	–	ibm
IBM Security Bulletins	Security Bulletin:IBM TRIRIGA Application Platform discloses CVE-2021-23926	30 Aug 202216:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in open source libraries affects Tivoli Netcool/OMNIbus WebGUI	28 Jun 202104:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: Apache XML Beans Vulnerability Affects the B2B API of IBM Sterling B2B Integrator (CVE-2021-23926)	20 Oct 202118:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites affect IBM Jazz Foundation and IBM Engineering products.	16 Jul 202117:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities	22 Jun 202316:30	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability found in XMLBeans which hipped with IBM® Intelligent Operations Center (CVE-2021-23926)	8 Sep 202206:54	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in xmlbeans-2.6.0.jar used by IBM SPSS Collaboration and Deployment Service (CVE-2021-23926)	3 Mar 202516:41	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "e8fa9000-4160-3659-9d2e-9b9035ad53ee",
        "vendor": {
          "name": "Apache Software Foundation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "a4794361-88fc-38c3-b756-eeb04545d854",
        "product": {
          "name": "Apache XMLBeans"
        },
        "product_version": "Apache XMLBeans ≤2.6.0"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-23926
issues	www.issues.apache.org/jira/browse/XMLBEANS-517
lists	www.lists.apache.org/thread.html/r2dc5588009dc9f0310b7382269f932cc96cae4c3901b747dda1a7fed@%3Cjava-dev.axis.apache.org%3E
lists	www.lists.apache.org/thread.html/rbb01d10512098894cd5f22325588197532c64f1c818ea7e4120d40c1@%3Cjava-dev.axis.apache.org%3E
lists	www.lists.debian.org/debian-lts-announce/2021/06/msg00024.html
poi	www.poi.apache.org/
security	www.security.netapp.com/advisory/ntap-20210513-0004
oracle	www.oracle.com/security-alerts/cpujul2022.html
oracle	www.oracle.com/security-alerts/cpuoct2021.html
suse	www.suse.com/security/cve/CVE-2021-23926.html

07 Oct 2025 00:30Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.19.1

CVSS 26.4

EPSS0.00444