Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of all three projects, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted source…
Critical CVSS 9.8
Summary
Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of all three projects, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
Sources
- NVD DATABASE
Original Links
- https://pivotal.io/security/cve-2019-3773 Vendor Advisory
- https://security.netapp.com/advisory/ntap-20231227-0011/
- https://www.oracle.com//security-alerts/cpujul2021.html Patch
- https://www.oracle.com/security-alerts/cpuApr2021.html Not Applicable
- https://www.oracle.com/security-alerts/cpujan2021.html Patch
- https://pivotal.io/security/cve-2019-3773 Vendor Advisory
- https://security.netapp.com/advisory/ntap-20231227-0011/
- https://www.oracle.com//security-alerts/cpujul2021.html Patch
- https://www.oracle.com/security-alerts/cpuApr2021.html Not Applicable
- https://www.oracle.com/security-alerts/cpujan2021.html Patch
Timeline
- nvd_ingest NVD