PT-2024-3924

🗓️ 04 Feb 2024 00:00:00Reported by Positive TechnologiesType

Expat parser denial of service from recursive entity expansion when DTD is undefined at compile time, up to 2.5.0.

Reporter	Title	Published	Views	Family All 805
FreeBSD	expat -- multiple vulnerabilities	31 Jan 202600:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM Engineering Requirements Management DOORS and DOORS Web Access is affected by multiple vulnerabilities	6 Jul 202613:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by IBM WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On due to Expat vulnerabilities	11 Apr 202202:48	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Expat IBM Tivoli Network Manager is vulnerable to arbitrary code execution (multiple vulnerabilities)	4 Jul 202212:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by multiple vulnerabilities in Expact library.	19 Jul 202208:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from expat, Golang Go, gcc, openssl and libxml.	16 May 202206:59	–	ibm
IBM Security Bulletins	Security Bulletin: Expat vulnerabilities affect IBM Netezza Analytics for NPS	3 Jun 202214:32	–	ibm
IBM Security Bulletins	Security Bulletin: Oracle Outside In Technology (OIT) v8.5.8 BP3 vulnerabilities CVE-2026-25646 (vulnerable), CVE-2026-25210 (vulnerable), CVE-2026-22184, CVE-2025-68431(affected, not vulnerable) in FileNet Content Manager (FNCM) Content	6 Aug 202607:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Netezza Analytics - NPS	11 Jul 202511:19	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been disclosed in Expat, which is installed as part of IBM Tivoli Network Manager (CVE-2023-52425).	21 Mar 202413:05	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2022-22823
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-45490
osv	www.osv.dev/vulnerability/CLEANSTART-2026-EM10970
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-23852
osv	www.osv.dev/vulnerability/DEBIAN-CVE-2023-52426
bugzilla	www.bugzilla.suse.com/1229930
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-25236
osv	www.osv.dev/vulnerability/ALPINE-CVE-2023-52426
osv	www.osv.dev/vulnerability/CVE-2022-25315
osv	www.osv.dev/vulnerability/CVE-2022-22827

18 Sep 2026 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 3.15.5 - 9.8

CVSS 27.5

EPSS0.04829

SSVC