Information disclosure, XXE injection, code execution, DoS.
vulners.com/securityvulns/securityvulns:doc:32256
vulners.com/securityvulns/securityvulns:doc:32257
vulners.com/securityvulns/securityvulns:doc:32258
vulners.com/securityvulns/securityvulns:doc:32259