CWE-112
8 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 8Published CVEs8 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-1190
Org.keycloak/keycloak-services: keycloak saml brokering: response delay due to unchecked notonorafter in subjectconfirmationdata
Red Hat · Red Hat build of Keycloak 26.4
Low3.1 - CVE-2025-68493
Apache Struts, Apache Struts: XXE vulnerability in outdated XWork component
Apache Software Foundation · Apache Struts
High8.1 - CVE-2023-40310
Missing XML Validation vulnerability in SAP PowerDesigner Client BPMN2 import
SAP_SE · SAP PowerDesigner Client
Medium6.5 - CVE-2021-27780
HCL BigFix Mobile / Modern Client Management is vulnerable to unauthenticated XML interaction
HCL Software · HCL BigFix Mobile / Modern Client Management
Medium5.3 - CVE-2022-28213
When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML…
SAP SE · SAP BusinessObjects Business Intelligence Platform
High8.1 - CVE-2021-1359
Cisco Web Security Appliance Privilege Escalation Vulnerability
Cisco · Cisco Web Security Appliance (WSA)
Medium6.3 - CVE-2020-27282
In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an XML validation vulnerability in the ventilator allows privileged attackers with physical…
Hamilton Medical AG, T1-Ventillator
Medium4.3 - CVE-2020-1975
Missing XML Validation in PAN-OS Web Interface
Palo Alto Networks · PAN-OS
Medium6.8