СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2025-63917 PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML exte n/a / n/a · cnblogs / pdfpatcher | Критический | 7.1 | 0,43 % | PoC | 17.11.2025 | |
| CVE-2025-63551 A Server-Side Request Forgery (SSRF) vulnerability, achievable through an XML External Entity (XXE) n/a / n/a · metinfo / metinfo | Критический | 7.5 | 0,51 % | PoC | 06.11.2025 | |
| CVE-2026-81816 Apache OFBiz: XML external entity injection (XXE) Apache Software Foundation / Apache OFBiz | Информационный | — | — | 05.11.2026 | ||
| CVE-2026-123029 Wowza Streaming Engine before 4.12.2 processes XML external entities, which allows remote... Wowza / Streaming Engine | Высокий | 7.5 | — | 05.11.2026 | ||
| CVE-2026-61586 Copernik XML Factory: Improper restriction of XInclude resource resolution in Copernik XML Factory (stock JDK provider) copernik-eu / copernik-xml-factory | Высокий | 8.2 | 0,36 % | 30.10.2026 | ||
| CVE-2026-92198 Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vulnerability Quest / Foglight for Databases | Высокий | 8.2 | 2,8 % | 04.11.2026 | ||
| CVE-2026-92185 Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability Quest / Foglight for Databases | Высокий | 7.2 | 1,89 % | 04.11.2026 | ||
| CVE-2026-17615 Resteasy-core: resteasy sourceprovider remote unauthenticated file read Red Hat / Red Hat Build of Apache Camel 3.33.3.SP1 · Red Hat / Red Hat build of Keycloak 26.6 | Высокий | 7.5 | 0,82 % | 31.08.2026 | ||
| CVE-2025-65868 XML external entity (XXE) injection in eyoucms v1.7.1 allows remote attackers to cause a denial of s n/a / n/a · eyoucms / eyoucms | Критический | 7.5 | 0,46 % | PoC | 03.12.2025 | |
| CVE-2026-13289 IBM MQ Managed File Transfer is vulnerable to XML external entity injection IBM / MQ | Высокий | 7.1 | — | Патч | 04.11.2026 | |
| CVE-2026-13284 IBM MQ Managed File Transfer is vulnerable to XML external entity injection IBM / MQ | Высокий | 7.1 | — | Патч | 04.11.2026 | |
| CVE-2026-13271 IBM MQ Managed File Transfer is affected by a denial of service vulnerability IBM / MQ | Высокий | 8.1 | — | Патч | 04.11.2026 | |
| CVE-2026-12975 Apicurio/apicurio-registry: apicurio-registry: unhardened saxparser in content-type detection leads to blind xxe / ssrf / billion-laughs dos Red Hat / Red Hat build of Apicurio Registry 3.3.1 · io.apicurio:apicurio-registry-schema-util-common | Высокий | 8.5 | 0,44 % | Патч | 26.06.2026 | |
| CVE-2026-19721 XXE in TÜBİTAK BİLGEM's İmzager TÜBİTAK BİLGEM Software Technologies Research Institute / İmzager | Низкий | 3.3 | 0,11 % | 04.11.2026 | ||
| CVE-2026-114552 MailEnable parseObjectResponse XML External Entity Processing Information Disclosure Vulnerability MailEnable / MailEnable | Средний | 6.5 | 0,46 % | 04.11.2026 | ||
| CVE-2026-85250 Apache Camel: Camel-XPath XML External Entity Processing and File Disclosure via the documentType=InputSource Option Apache Software Foundation / Apache Camel · apache / camel | Высокий | 7.5 | 0,7 % | Патч | 19.10.2026 | |
| CVE-2026-113582 Apache Abdera: XML external entity expansion in Atom document parsing Apache Software Foundation / Apache Abdera | Высокий | 8.7 | 0,46 % | 22.10.2026 | ||
| CVE-2026-90531 Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) Adobe / Adobe Experience Manager as a Cloud Service · Adobe / Adobe Experience Manager 6.5 LTS | Критический | 9.6 | 1,4 % | 13.10.2026 | ||
| CVE-2026-93570 XML External Entity injection in Szafir and Szafir Weryfikująca Krajowa Izba Rozliczeniowa / Szafir · Krajowa Izba Rozliczeniowa / Szafir Weryfikująca | Высокий | 8.2 | 0,28 % | 29.10.2026 | ||
| CVE-2026-66090 XML External Entity (XXE) Injection in Metadata Field Allows Arbitrary File Read Apereo Foundation / openEQUELLA | Высокий | 7.1 | 0,27 % | 29.10.2026 | ||
| CVE-2026-66089 XML External Entity (XXE) Vulnerability in SOAP Interface Allows External Entity Expansion Apereo Foundation / openEQUELLA | Средний | 6.1 | 0,27 % | 29.10.2026 | ||
| CVE-2026-54668 Kitodo.Production: XXE in XMLUtils EAD/XML upload parsers (parseXMLString / getNumberOfEADElements / checkIfXmlIsWellFormed lack secure JAXP config) kitodo / kitodo-production | Критический | 8.7 | 0,3 % | PoC | 23.10.2026 | |
| CVE-2026-49875 Apache CXF: XML External Entity (XXE) Injection in W3CMultiSchemaFactory and EndpointReferenceUtils Apache Software Foundation / Apache CXF · Red Hat / Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16 | Критический | 9.8 | 0,53 % | Патч | 12.06.2026 | |
| CVE-2023-42346 Alkacon OpenCms before 16 allows XXE when the refers to an external host. Продукт уточняется | Высокий | 7.5 | 0,23 % | 08.05.2026 | ||
| CVE-2023-42344 Alkacon OpenCms before 10.5.1 allows remote unauthenticated attackers to obtain sensitive informatio Продукт уточняется | Высокий | 7.3 | 2,34 % | 08.05.2026 | ||
| CVE-2026-118039 XML External Entity Reference in Telerik Document Processing Libraries SVG Image Processing Progress Software / Telerik Document Processing Libraries | Высокий | 7.5 | 0,27 % | 28.10.2026 | ||
| CVE-2026-112198 Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop App Tactis / NoviGest Desktop App | Высокий | 8.3 | 0,16 % | 28.10.2026 | ||
| CVE-2024-58335 OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype jcthiele / OpenXRechnungToolbox | Средний | 5.0 | 0,2 % | 24.12.2025 | ||
| CVE-2026-108358 PhpSpreadsheet: XmlScanner Bypass via ISO-2022 Escape Sequences Allows XXE and Denial of Service PHPOffice / PhpSpreadsheet · phpoffice/phpspreadsheet | Высокий | 8.8 | 0,63 % | Патч | 22.10.2026 | |
| CVE-2026-108357 PhpSpreadsheet: XmlScanner Bypass via Double-Encoded unentity() TOCTOU Allows XXE and Denial of Service PHPOffice / PhpSpreadsheet · phpoffice/phpspreadsheet | Высокий | 8.8 | 0,46 % | Патч | 22.10.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.