Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2026/01/06 2:05 p.m.•17 views

CVE-2025-68280

Improper Restriction of XML External Entity Reference vulnerability in Apache SIS. It is possible to write XML files in such a way that, when parsed by Apache SIS, an XML file reveals to the attacker the content of a local file on the server running Apache SIS. This vulnerability impacts the...

6.5CVSS6.6AI score0.00683EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/05 3:32 p.m.•9 views

GHSA-JQMR-2PG9-VFX7 Apache SIS has Improper Restriction of XML External Entity Reference vulnerability

Improper Restriction of XML External Entity Reference vulnerability in Apache SIS. It is possible to write XML files in such a way that, when parsed by Apache SIS, an XML file reveals to the attacker the content of a local file on the server running Apache SIS. This vulnerability impacts the...

6.5CVSS5.8AI score0.00683EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/01/05 1:45 p.m.•43 views

CVE-2025-68280 Apache SIS: XML External Entity (XXE) vulnerability

Improper Restriction of XML External Entity Reference vulnerability in Apache SIS. It is possible to write XML files in such a way that, when parsed by Apache SIS, an XML file reveals to the attacker the content of a local file on the server running Apache SIS. This vulnerability impacts the...

0.00683EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/05 1:45 p.m.•36 views

CVE-2025-68280

Apache SIS versions 0.4 through 1.5 inclusive are vulnerable to an Improper Restriction of XML External Entity Reference vulnerability. An attacker can craft malicious XML files that, when parsed by the library, reveal the content of local files on the server. This issue specifically impacts the ...

6.2AI score0.00683EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2026/01/05 1:45 p.m.•18 views

CVE-2025-68280 Apache SIS: XML External Entity (XXE) vulnerability

Improper Restriction of XML External Entity Reference vulnerability in Apache SIS. It is possible to write XML files in such a way that, when parsed by Apache SIS, an XML file reveals to the attacker the content of a local file on the server running Apache SIS. This vulnerability impacts the...

6.5CVSS5.9AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/05 12:00 a.m.•2 views

CVE-2025-68280: Improper Restriction of XML External Entity Reference

Improper Restriction of XML External Entity Reference vulnerability in Apache SIS. It is possible to write XML files in such a way that, when parsed by Apache SIS, an XML file reveals to the attacker the content of a local file on the server running Apache SIS. This vulnerability impacts the...

6.5CVSS5.8AI score0.00683EPSS
SaveExploits0References1
Rows per page
Query Builder