CVE-2017-5661

CVE-2017-5661 is described in connected IBM documentation as affecting IBM Intelligent Operations Center (IOC) with fop-1.1.jar. The root cause is an XML External Entity (XXE) processing vulnerability when handling SVG/XML, potentially allowing a remote attacker to obtain sensitive information; i...

CVE-2024-28168

An Improper Restriction of XML External Entity Reference (XXE) vulnerability exists in Apache XML Graphics FOP version 2.9. This flaw allows a remote attacker to perform XXE attacks due to incorrect restrictions on XML references to external objects. The vulnerability affects several third-party ...