CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-1000061

xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible information disclosure or denial of service

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 68.5%

CVSS Severity

CVSS v3 Score 7.1

CVSS v2 Score 5.8

References

Products affected by CVE-2017-1000061

Xmlsec Project » Xmlsec » Version: 0.0.10

cpe:2.3:a:xmlsec_project:xmlsec:0.0.10
Xmlsec Project » Xmlsec » Version: 0.0.11

cpe:2.3:a:xmlsec_project:xmlsec:0.0.11
Xmlsec Project » Xmlsec » Version: 0.0.12

cpe:2.3:a:xmlsec_project:xmlsec:0.0.12
Xmlsec Project » Xmlsec » Version: 0.0.13

cpe:2.3:a:xmlsec_project:xmlsec:0.0.13
Xmlsec Project » Xmlsec » Version: 0.0.14

cpe:2.3:a:xmlsec_project:xmlsec:0.0.14
Xmlsec Project » Xmlsec » Version: 0.0.15

cpe:2.3:a:xmlsec_project:xmlsec:0.0.15
Xmlsec Project » Xmlsec » Version: 0.0.5

cpe:2.3:a:xmlsec_project:xmlsec:0.0.5
Xmlsec Project » Xmlsec » Version: 0.0.7

cpe:2.3:a:xmlsec_project:xmlsec:0.0.7
Xmlsec Project » Xmlsec » Version: 0.0.8

cpe:2.3:a:xmlsec_project:xmlsec:0.0.8
Xmlsec Project » Xmlsec » Version: 0.0.8a

cpe:2.3:a:xmlsec_project:xmlsec:0.0.8a
Xmlsec Project » Xmlsec » Version: 0.0.9

cpe:2.3:a:xmlsec_project:xmlsec:0.0.9
Xmlsec Project » Xmlsec » Version: 0.1.0

cpe:2.3:a:xmlsec_project:xmlsec:0.1.0
Xmlsec Project » Xmlsec » Version: 0.1.1

cpe:2.3:a:xmlsec_project:xmlsec:0.1.1
Xmlsec Project » Xmlsec » Version: 1.0.0-

cpe:2.3:a:xmlsec_project:xmlsec:1.0.0-
Xmlsec Project » Xmlsec » Version: 1.0.0pre1

cpe:2.3:a:xmlsec_project:xmlsec:1.0.0pre1
Xmlsec Project » Xmlsec » Version: 1.0.0rc1

cpe:2.3:a:xmlsec_project:xmlsec:1.0.0rc1
Xmlsec Project » Xmlsec » Version: 1.0.1

cpe:2.3:a:xmlsec_project:xmlsec:1.0.1
Xmlsec Project » Xmlsec » Version: 1.0.2

cpe:2.3:a:xmlsec_project:xmlsec:1.0.2
Xmlsec Project » Xmlsec » Version: 1.0.3

cpe:2.3:a:xmlsec_project:xmlsec:1.0.3
Xmlsec Project » Xmlsec » Version: 1.0.4

cpe:2.3:a:xmlsec_project:xmlsec:1.0.4
Xmlsec Project » Xmlsec » Version: 1.1.0

cpe:2.3:a:xmlsec_project:xmlsec:1.1.0
Xmlsec Project » Xmlsec » Version: 1.1.1

cpe:2.3:a:xmlsec_project:xmlsec:1.1.1
Xmlsec Project » Xmlsec » Version: 1.1.2

cpe:2.3:a:xmlsec_project:xmlsec:1.1.2
Xmlsec Project » Xmlsec » Version: 1.2.0

cpe:2.3:a:xmlsec_project:xmlsec:1.2.0
Xmlsec Project » Xmlsec » Version: 1.2.1

cpe:2.3:a:xmlsec_project:xmlsec:1.2.1
Xmlsec Project » Xmlsec » Version: 1.2.10

cpe:2.3:a:xmlsec_project:xmlsec:1.2.10
Xmlsec Project » Xmlsec » Version: 1.2.11

cpe:2.3:a:xmlsec_project:xmlsec:1.2.11
Xmlsec Project » Xmlsec » Version: 1.2.12

cpe:2.3:a:xmlsec_project:xmlsec:1.2.12
Xmlsec Project » Xmlsec » Version: 1.2.13

cpe:2.3:a:xmlsec_project:xmlsec:1.2.13
Xmlsec Project » Xmlsec » Version: 1.2.14

cpe:2.3:a:xmlsec_project:xmlsec:1.2.14
Xmlsec Project » Xmlsec » Version: 1.2.15

cpe:2.3:a:xmlsec_project:xmlsec:1.2.15
Xmlsec Project » Xmlsec » Version: 1.2.16

cpe:2.3:a:xmlsec_project:xmlsec:1.2.16
Xmlsec Project » Xmlsec » Version: 1.2.17

cpe:2.3:a:xmlsec_project:xmlsec:1.2.17
Xmlsec Project » Xmlsec » Version: 1.2.18

cpe:2.3:a:xmlsec_project:xmlsec:1.2.18
Xmlsec Project » Xmlsec » Version: 1.2.19

cpe:2.3:a:xmlsec_project:xmlsec:1.2.19
Xmlsec Project » Xmlsec » Version: 1.2.2

cpe:2.3:a:xmlsec_project:xmlsec:1.2.2
Xmlsec Project » Xmlsec » Version: 1.2.20

cpe:2.3:a:xmlsec_project:xmlsec:1.2.20
Xmlsec Project » Xmlsec » Version: 1.2.21

cpe:2.3:a:xmlsec_project:xmlsec:1.2.21
Xmlsec Project » Xmlsec » Version: 1.2.22

cpe:2.3:a:xmlsec_project:xmlsec:1.2.22
Xmlsec Project » Xmlsec » Version: 1.2.23

cpe:2.3:a:xmlsec_project:xmlsec:1.2.23
Xmlsec Project » Xmlsec » Version: 1.2.3

cpe:2.3:a:xmlsec_project:xmlsec:1.2.3
Xmlsec Project » Xmlsec » Version: 1.2.4

cpe:2.3:a:xmlsec_project:xmlsec:1.2.4
Xmlsec Project » Xmlsec » Version: 1.2.5

cpe:2.3:a:xmlsec_project:xmlsec:1.2.5
Xmlsec Project » Xmlsec » Version: 1.2.6

cpe:2.3:a:xmlsec_project:xmlsec:1.2.6
Xmlsec Project » Xmlsec » Version: 1.2.7

cpe:2.3:a:xmlsec_project:xmlsec:1.2.7
Xmlsec Project » Xmlsec » Version: 1.2.8

cpe:2.3:a:xmlsec_project:xmlsec:1.2.8
Xmlsec Project » Xmlsec » Version: 1.2.9

cpe:2.3:a:xmlsec_project:xmlsec:1.2.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-1000061

Products

Pricing

Contact Us