AI Score
Confidence
Low
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
FD Application Apr. 2022 Edition (Version 9.01) and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.
jvn.jp/en/jp/JVN39596244/
web.fd-shinsei.mhlw.go.jp/download/software/index.html