VDB
BDU%3A2025-04265
BDU%3A2025-04265
PUBLISHED
CVSS 10 CRITICAL
Уязвимость компонента XML parsers средства разработки программного обеспечения iText, позволяющая нарушителю проводить XXE-атаки
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., iText Group, HP Inc. | Primavera Unifier, iText, HPE Intelligent Management Center |
Timeline
- Apr 11, 2025 CVE Published
References
- https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2017-017_itext_xml_external_entity_attack.txt url
- https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-hpesbhf03902en_us url
- https://www.oracle.com/security-alerts/cpuoct2020.html url
- https://vuldb.com/?id.109243 url