CVE-2019-5919

CVE-2019-5919 affects Nablarch 5 (including 5, 5u1–5u13). The vulnerability is an incomplete cryptography of the data store function caused by a hidden tag, enabling remote attackers to obtain information about stored data, register invalid values, or alter values via unspecified vectors. The iss...

CVE-2019-5918

Affected software: Nablarch 5 (5, and 5u1 to 5u13). Vulnerability: XML External Entity (XXE) attacks due to lack of XML validation/external DTD handling (CWE-611). Impact: remote attacker could cause information leakage or system shutdown. Root cause (as stated): XXE in the generic formatter func...