(0Day) Sparx Systems Enterprise Architect XSLT Debugger XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sparx Systems Enterprise Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

CVE-2026-88794

Enterprise Architect is vulnerable to XML External Entity XXE injection in the XSLT Debugger feature. When a user loads a crafted XML file containing a DOCTYPE with an external DTD reference, the parser processes external entities, allowing an attacker to read arbitrary files from the victim's...

CVE-2026-88794 XML External Entity injection in Sparx Enterprise Architect

Enterprise Architect is vulnerable to XML External Entity XXE injection in the XSLT Debugger feature. When a user loads a crafted XML file containing a DOCTYPE with an external DTD reference, the parser processes external entities, allowing an attacker to read arbitrary files from the victim's...

CVE-2026-88794

Sparx Enterprise Architect is vulnerable to an XML External Entity (XXE) injection within the XSLT Debugger feature. The root cause is a parser that processes external entities when a user loads a crafted XML file containing a DOCTYPE with an external DTD reference. This vulnerability allows an a...

EUVD-2026-102045

Enterprise Architect is vulnerable to XML External Entity XXE injection in the XSLT Debugger feature. When a user loads a crafted XML file containing a DOCTYPE with an external DTD reference, the parser processes external entities, allowing an attacker to read arbitrary files from the victim's...

CVE-2026-88794 XML External Entity injection in Sparx Enterprise Architect

Enterprise Architect is vulnerable to XML External Entity XXE injection in the XSLT Debugger feature. When a user loads a crafted XML file containing a DOCTYPE with an external DTD reference, the parser processes external entities, allowing an attacker to read arbitrary files from the victim's...

PT-2026-114926

Name of the Vulnerable Software and Affected Versions Enterprise Architect version 17.1 Description The XSLT Debugger feature allows XML External Entity XXE injection. This occurs when the parser processes a crafted XML file containing a DOCTYPE with an external DTD reference, enabling an attacke...

CVE-2026-88794: Improper Restriction of XML External Entity Reference

Enterprise Architect is vulnerable to XML External Entity XXE injection in the XSLT Debugger feature. When a user loads a crafted XML file containing a DOCTYPE with an external DTD reference, the parser processes external entities, allowing an attacker to read arbitrary files from the victim's...

Sparx Systems Enterprise Architect: Input validation vulnerability

Sparx Systems Enterprise Architect version 17.1 has a vulnerability related to input validation. This vulnerability stems from XML External Entities XXE injections in the XSLT Debugger function. When users load special XML files that contain external DTD references, the parser processes these...

CVE-2020-7914

In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3...

CVE-2020-7914

In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3...

CVE-2020-7914

In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3...

Design/Logic Flaw

In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3...

CVE-2020-7914

In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3...

UBUNTU-CVE-2020-7914

In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3...

CVE-2020-7914

In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3...

CVE-2020-7914

In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3...

CVE-2020-7914

The vulnerability CVE-2020-7914 affects JetBrains IntelliJ IDEA 2019.2 and is caused by a misconfiguration in the XSLT debugger plugin that enables arbitrary file reads over the network. The issue allows disclosure of local files via network interactions and was fixed in IntelliJ IDEA 2019.3. Con...

CVE-2020-7914: Undefined Security Weakness

In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3...

PT-2020-19843

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions 2019.2 Description The issue is related to an XSLT debugger plugin misconfiguration in JetBrains IntelliJ IDEA, allowing arbitrary file read operations over the network. This was fixed in version 2019.3...