Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:45826
HistoryMar 11, 2024 - 7:18 a.m.

XML Entity Expansion

2024-03-1107:18:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17
libexpat
xml entity expansion
input validation
external entities
software vulnerability

AI Score

6.7

Confidence

High

EPSS

0

Percentile

10.3%

JSON

libexpat is vulnerable to XML Entity Expansion. The vulnerability is caused due to insufficient input validation and handling of external entities in the XML parser. This allows an attacker to perform an XML Entity Expansion attack.

Affected configurations

Vulners
Node
veracodelibexpat.soRange1.9.0–1.9.0
OR
veracodeexpat\Matchsid2.4.1-2
OR
veracodeexpat\Matchsid2.2.10-1
OR
veracodeexpat\Matchedge2.4.8-r1
OR
veracodeexpat\Matchedge2.4.5-r0
OR
veracodeexpat\Matchedge2.5.0-r0
OR
veracodeexpat\Matchedge2.2.9-r1
OR
veracodeexpat\Matchedge2.6.0-r0
OR
veracodeexpat\Matchedge2.4.8-r0
OR
veracodeexpat\Matchedge2.2.10-r1
OR
veracodeexpat\Matchedge2.4.6-r0
OR
veracodeexpat\Matchedge2.3.0-r0
OR
veracodeexpat\Matchedge2.4.4-r0
OR
veracodeexpat\Matchedge2.4.7-r0
OR
veracodeexpat\Matchedge2.4.9-r0
OR
veracodeexpat\Matchedge2.4.3-r0
OR
veracodeexpat\Matchedge2.5.0-r2
OR
veracodeexpat\Matchedge2.5.0-r1
OR
veracodeexpat\Matchedge2.6.1-r0
OR
veracodeexpat\Matchedge2.4.1-r0
OR
veracodeexpat\Matchedge2.4.2-r0
OR
veracodeexpat\Match3.162.6.0-r0
OR
veracodeexpat\Match3.162.4.8-r0
OR
veracodeexpat\Match3.162.5.0-r0
OR
veracodeexpat\Match3.162.4.9-r0
OR
veracodeexpat\Match3.172.6.0-r0
OR
veracodeexpat\Match3.172.5.0-r0
OR
veracodeexpat\Match3.192.5.0-r2
OR
veracodeexpat\Match3.192.6.0-r0
OR
veracodeexpat\Match3.182.5.0-r1
OR
veracodeexpat\Match3.182.6.0-r0
OR
veracodelibexpat.soRange1.9.0–1.9.0
OR
veracodeexpat\Matchsid2.4.1-2
OR
veracodeexpat\Matchsid2.2.10-1
OR
veracodeexpat\Matchedge2.4.8-r1
OR
veracodeexpat\Matchedge2.4.5-r0
OR
veracodeexpat\Matchedge2.5.0-r0
OR
veracodeexpat\Matchedge2.2.9-r1
OR
veracodeexpat\Matchedge2.6.0-r0
OR
veracodeexpat\Matchedge2.4.8-r0
OR
veracodeexpat\Matchedge2.2.10-r1
OR
veracodeexpat\Matchedge2.4.6-r0
OR
veracodeexpat\Matchedge2.3.0-r0
OR
veracodeexpat\Matchedge2.4.4-r0
OR
veracodeexpat\Matchedge2.4.7-r0
OR
veracodeexpat\Matchedge2.4.9-r0
OR
veracodeexpat\Matchedge2.4.3-r0
OR
veracodeexpat\Matchedge2.5.0-r2
OR
veracodeexpat\Matchedge2.5.0-r1
OR
veracodeexpat\Matchedge2.6.1-r0
OR
veracodeexpat\Matchedge2.4.1-r0
OR
veracodeexpat\Matchedge2.4.2-r0
OR
veracodeexpat\Match3.162.6.0-r0
OR
veracodeexpat\Match3.162.4.8-r0
OR
veracodeexpat\Match3.162.5.0-r0
OR
veracodeexpat\Match3.162.4.9-r0
OR
veracodeexpat\Match3.172.6.0-r0
OR
veracodeexpat\Match3.172.5.0-r0
OR
veracodeexpat\Match3.192.5.0-r2
OR
veracodeexpat\Match3.192.6.0-r0
OR
veracodeexpat\Match3.182.5.0-r1
OR
veracodeexpat\Match3.182.6.0-r0
VendorProductVersionCPE
veracodelibexpat.so*cpe:2.3:a:veracode:libexpat.so:*:*:*:*:*:*:*:*
veracodeexpat\sidcpe:2.3:a:veracode:expat\:sid:2.4.1-2:*:*:*:*:*:*:*
veracodeexpat\sidcpe:2.3:a:veracode:expat\:sid:2.2.10-1:*:*:*:*:*:*:*
veracodeexpat\edgecpe:2.3:a:veracode:expat\:edge:2.4.8-r1:*:*:*:*:*:*:*
veracodeexpat\edgecpe:2.3:a:veracode:expat\:edge:2.4.5-r0:*:*:*:*:*:*:*
veracodeexpat\edgecpe:2.3:a:veracode:expat\:edge:2.5.0-r0:*:*:*:*:*:*:*
veracodeexpat\edgecpe:2.3:a:veracode:expat\:edge:2.2.9-r1:*:*:*:*:*:*:*
veracodeexpat\edgecpe:2.3:a:veracode:expat\:edge:2.6.0-r0:*:*:*:*:*:*:*
veracodeexpat\edgecpe:2.3:a:veracode:expat\:edge:2.4.8-r0:*:*:*:*:*:*:*
veracodeexpat\edgecpe:2.3:a:veracode:expat\:edge:2.2.10-r1:*:*:*:*:*:*:*
Rows per page:
1-10 of 311

Related

slackware 2
openvas 27
githubexploit 3
nessus 34
fedora 9
f5 1
cvelist 1
cbl_mariner 2
nvd 1
ibm 14
redhatcve 1
debiancve 1
osv 4
cve 1
ubuntucve 1
vulnrichment 1
aix 1
alpinelinux 1
redos 1
cloudfoundry 1
redhat 18
photon 2
mageia 1
almalinux 1
oraclelinux 1
ubuntu 1
ics 1
oracle 1
slackware
slackware
[slackware-security] expat
2024-03-13 19:51:59
[slackware-security] python3
2024-09-09 01:06:11
openvas
openvas
Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2024-1956)
2024-07-16 00:00:00
Fedora: Security Advisory (FEDORA-2024-afb73e6f62)
2024-03-25 00:00:00
Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2024-1810)
2024-06-25 00:00:00
githubexploit
githubexploit
Exploit for CVE-2024-28757
2024-05-03 09:21:27
Exploit for CVE-2024-28757
2024-05-03 04:58:24
Exploit for CVE-2024-28757
2024-05-03 09:24:51
nessus
nessus
Slackware Linux 15.0 / current expat Vulnerability (SSA:2024-073-01)
2024-03-13 00:00:00
Photon OS 5.0: Expat PHSA-2024-5.0-0229
2024-07-24 00:00:00
EulerOS 2.0 SP11 : expat (EulerOS-SA-2024-1831)
2024-06-25 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: mingw-expat-2.6.1-1.fc38
2024-03-19 02:00:28
[SECURITY] Fedora 39 Update: mingw-expat-2.6.1-1.fc39
2024-03-19 01:10:52
[SECURITY] Fedora 40 Update: mingw-expat-2.6.1-1.fc40
2024-03-23 00:50:46
f5
f5
K000139637: Expat vulnerability CVE-2024-28757
2024-05-16 00:00:00
cvelist
cvelist
CVE-2024-28757
2024-03-10 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-28757 affecting package expat for versions less than 2.6.2-2
2024-04-09 20:48:36
CVE-2024-28757 affecting package expat for versions less than 2.6.2-1
2024-06-21 09:32:44
nvd
nvd
CVE-2024-28757
2024-03-10 05:15:06
ibm
ibm
Security Bulletin: IBM® Db2® NSE (Net Search Extender) is affected by a vulnerability in the open source Expat library. (CVE-2024-28757)
2024-06-11 17:31:41
Security Bulletin: AIX is affected by information disclosure due to Python (CVE-2024-28757)
2024-06-13 22:04:57
Security Bulletin: IBM Observability with Instana is affected by Multiple Security Vulnerabilities
2024-05-08 09:39:44
redhatcve
redhatcve
CVE-2024-28757
2024-03-10 10:10:35
debiancve
debiancve
CVE-2024-28757
2024-03-10 05:15:06
osv
osv
CVE-2024-28757
2024-03-10 05:15:06
expat-2.6.2-1.1 on GA media
2024-06-15 00:00:00
Moderate: expat security update
2024-03-26 00:00:00
cve
cve
CVE-2024-28757
2024-03-10 05:15:06
ubuntucve
ubuntucve
CVE-2024-28757
2024-03-10 00:00:00
vulnrichment
vulnrichment
CVE-2024-28757
2024-03-10 00:00:00
aix
aix
AIX is affected by information disclosure due to Python (CVE-2024-28757)
2024-06-13 15:37:38
alpinelinux
alpinelinux
CVE-2024-28757
2024-03-10 05:15:06
redos
redos
ROS-20240506-01
2024-05-06 00:00:00
cloudfoundry
cloudfoundry
USN-6694-1: Expat vulnerabilities | Cloud Foundry
2024-04-04 00:00:00
redhat
redhat
(RHSA-2024:3926) Moderate: expat security update
2024-06-13 14:14:44
(RHSA-2024:1530) Moderate: expat security update
2024-03-26 16:30:26
(RHSA-2024:4041) Important: OpenShift Container Platform 4.15.19 bug fix and security update
2024-06-26 12:01:55
photon
photon
Important Photon OS Security Update - PHSA-2024-5.0-0229
2024-03-22 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0582
2024-03-22 00:00:00
mageia
mageia
Updated expat packages fix security vulnerabilities
2024-03-18 19:12:23
almalinux
almalinux
Moderate: expat security update
2024-03-26 00:00:00
oraclelinux
oraclelinux
expat security update
2024-03-26 00:00:00
ubuntu
ubuntu
Expat vulnerabilities
2024-03-14 00:00:00
ics
ics
Siemens SINEC NMS
2024-08-15 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00

AI Score

6.7

Confidence

High

EPSS

0

Percentile

10.3%

JSON
Related for VERACODE:45826
slackware2openvas27githubexploit3nessus34fedora9f51cvelist1cbl_mariner2nvd1ibm14redhatcve1debiancve1osv4cve1ubuntucve1vulnrichment1aix1alpinelinux1redos1cloudfoundry1redhat18photon2mageia1almalinux1oraclelinux1ubuntu1ics1oracle1