CVE-2017-5661

CVE-2017-5661 is described in connected IBM documentation as affecting IBM Intelligent Operations Center (IOC) with fop-1.1.jar. The root cause is an XML External Entity (XXE) processing vulnerability when handling SVG/XML, potentially allowing a remote attacker to obtain sensitive information; i...

CVE-2024-28168

CVE-2024-28168 concerns an XXE in Apache XML Graphics FOP affecting version 2.9. The root cause is an improper restriction of XML External Entity references, leading to potential exposure of sensitive data if exploited over the network. The CVSS base score is 7.5 (Network attacker, no user intera...