Lucene search
Veracode Vulnerability DatabaseVERACODE:13239HistoryJan 16, 2019 - 6:32 a.m.
XML External Entity Injection (XXE)
2019-01-1606:32:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.005 Low
EPSS
Percentile
76.7%
Spring Integration is vulnerable to XML external entity injection (XXE). The library does not filter malicious XML data input due to failing to disable the Document Type Definition External Entities by default.
Related
nvd
nvd
CVE-2019-3772
2019-01-18 22:29:00
osv
osv
cve
cve
CVE-2019-3772
2019-01-18 22:29:00
github
github
redhatcve
redhatcve
CVE-2019-3772
2020-04-05 10:59:39
prion
prion
Xxe
2019-01-18 22:29:00
cvelist
cvelist
CVE-2019-3772 Spring Integration XML External Entity Injection (XXE)
2019-01-15 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2019
2019-04-16 00:00:00