CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2023/03/24 4:15 p.m.•22 views

CVE-2023-28152

An issue was discovered in Independentsoft JWord before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

9.8CVSS6.5AI score0.00746EPSS

SaveExploits0References3

Vulnrichment•added 2023/03/24 12:0 a.m.•10 views

CVE-2023-28152

An issue was discovered in Independentsoft JWord before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

5.3CVSS9.5AI score0.00746EPSS

SaveExploits0References3

Cvelist•added 2023/03/24 12:0 a.m.•26 views

CVE-2023-28152

An issue was discovered in Independentsoft JWord before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

5.3CVSS9.6AI score0.00746EPSS

SaveExploits0References3

CVE•added 2023/03/24 12:0 a.m.•49 views

CVE-2023-28152

Independentsoft JWord before 1.1.110 is affected by an XML External Entity (XXE) injection via a remote DTD in a DOCX file. The.Root cause is an XXE vulnerability in the API that parses DOCX content, enabling unauthorized data access or manipulation. Impact in the NVD listing shows high severity ...

9.8CVSS9.3AI score0.00746EPSS

SaveExploits0References3Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by