Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-9628

Опубликовано: 11 апр. 2019
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

The XMLTooling library all versions prior to V3.0.4, provided with the OpenSAML and Shibboleth Service Provider software, contains an XML parsing class. Invalid data in the XML declaration causes an exception of a type that was not handled properly in the parser class and propagates an unexpected exception type.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:xmltooling_project:xmltooling:*:*:*:*:*:*:*:*
Версия до 3.0.4 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*

EPSS

Процентиль: 74%
0.00829
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-755

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 7 лет назад

The XMLTooling library all versions prior to V3.0.4, provided with the OpenSAML and Shibboleth Service Provider software, contains an XML parsing class. Invalid data in the XML declaration causes an exception of a type that was not handled properly in the parser class and propagates an unexpected exception type.

CVSS3: 7.5
redhat
почти 7 лет назад

The XMLTooling library all versions prior to V3.0.4, provided with the OpenSAML and Shibboleth Service Provider software, contains an XML parsing class. Invalid data in the XML declaration causes an exception of a type that was not handled properly in the parser class and propagates an unexpected exception type.

CVSS3: 7.5
debian
почти 7 лет назад

The XMLTooling library all versions prior to V3.0.4, provided with the ...

suse-cvrf
почти 7 лет назад

Security update for xmltooling

suse-cvrf
почти 7 лет назад

Security update for xmltooling

EPSS

Процентиль: 74%
0.00829
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-755