Lucene search
Veracode Vulnerability DatabaseVERACODE:4590HistoryJul 18, 2017 - 6:40 p.m.
XML External Entity (XXE) Processing
2017-07-1818:40:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
40.5%
Apache Sling XSS protection is vulnerable to XML External Entity (XXE) processing attacks. The library uses an insecure SAX parser to validate strings, allowing a malicious user to read sensitive data in the filesystem, conduct port-scanning behind the firewall or execute arbitrary code.
Related
nvd
nvd
CVE-2016-6798
2017-07-19 15:29:00
github
github
XML External Entity Reference in Apache Sling
2022-05-17 02:26:22
prion
prion
Cross site request forgery (csrf)
2017-07-19 15:29:00
cvelist
cvelist
CVE-2016-6798
2017-07-18 00:00:00
cve
cve
CVE-2016-6798
2017-07-19 15:29:00
osv
osv
XML External Entity Reference in Apache Sling
2022-05-17 02:26:22
CVE-2016-6798
2017-07-19 15:29:00