CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-6194

In Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered to prohibit document type definition (DTD) references to external entities. This means that if a user chooses to use a malicious report definition XML file containing an external entity reference to generate a report then Eclipse Memory Analyzer may access external files or URLs defined via a DTD in the report definition.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 11.4%

CVSS Severity

CVSS v3 Score 2.8

References

Products affected by CVE-2023-6194

Eclipse » Memory Analyzer » Version: 0.7

cpe:2.3:a:eclipse:memory_analyzer:0.7
Eclipse » Memory Analyzer » Version: 0.8

cpe:2.3:a:eclipse:memory_analyzer:0.8
Eclipse » Memory Analyzer » Version: 1.0.0

cpe:2.3:a:eclipse:memory_analyzer:1.0.0
Eclipse » Memory Analyzer » Version: 1.0.1

cpe:2.3:a:eclipse:memory_analyzer:1.0.1
Eclipse » Memory Analyzer » Version: 1.1.0

cpe:2.3:a:eclipse:memory_analyzer:1.1.0
Eclipse » Memory Analyzer » Version: 1.1.1

cpe:2.3:a:eclipse:memory_analyzer:1.1.1
Eclipse » Memory Analyzer » Version: 1.10.0

cpe:2.3:a:eclipse:memory_analyzer:1.10.0
Eclipse » Memory Analyzer » Version: 1.11.0

cpe:2.3:a:eclipse:memory_analyzer:1.11.0
Eclipse » Memory Analyzer » Version: 1.12.0

cpe:2.3:a:eclipse:memory_analyzer:1.12.0
Eclipse » Memory Analyzer » Version: 1.13.0

cpe:2.3:a:eclipse:memory_analyzer:1.13.0
Eclipse » Memory Analyzer » Version: 1.14.0

cpe:2.3:a:eclipse:memory_analyzer:1.14.0
Eclipse » Memory Analyzer » Version: 1.2.0

cpe:2.3:a:eclipse:memory_analyzer:1.2.0
Eclipse » Memory Analyzer » Version: 1.2.1

cpe:2.3:a:eclipse:memory_analyzer:1.2.1
Eclipse » Memory Analyzer » Version: 1.3.0

cpe:2.3:a:eclipse:memory_analyzer:1.3.0
Eclipse » Memory Analyzer » Version: 1.3.1

cpe:2.3:a:eclipse:memory_analyzer:1.3.1
Eclipse » Memory Analyzer » Version: 1.4.0

cpe:2.3:a:eclipse:memory_analyzer:1.4.0
Eclipse » Memory Analyzer » Version: 1.5.0

cpe:2.3:a:eclipse:memory_analyzer:1.5.0
Eclipse » Memory Analyzer » Version: 1.6.0

cpe:2.3:a:eclipse:memory_analyzer:1.6.0
Eclipse » Memory Analyzer » Version: 1.6.1

cpe:2.3:a:eclipse:memory_analyzer:1.6.1
Eclipse » Memory Analyzer » Version: 1.7.0

cpe:2.3:a:eclipse:memory_analyzer:1.7.0
Eclipse » Memory Analyzer » Version: 1.8.0

cpe:2.3:a:eclipse:memory_analyzer:1.8.0
Eclipse » Memory Analyzer » Version: 1.8.1

cpe:2.3:a:eclipse:memory_analyzer:1.8.1
Eclipse » Memory Analyzer » Version: 1.9.0

cpe:2.3:a:eclipse:memory_analyzer:1.9.0
Eclipse » Memory Analyzer » Version: 1.9.1

cpe:2.3:a:eclipse:memory_analyzer:1.9.1
Eclipse » Memory Analyzer » Version: 1.9.2

cpe:2.3:a:eclipse:memory_analyzer:1.9.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-6194

Products

Pricing

Contact Us