CVE-2012-6685
HIGHNokogiri < 1.5.4 - XML Entity Expansion
Title source: ruleDescription
Nokogiri before 1.5.4 is vulnerable to XXE attacks
Scores
CVSS v3
7.5
EPSS
0.0032
EPSS Percentile
54.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Classification
CWE
CWE-776
Status
published
Affected Products (10)
nokogiri/nokogiri
< 1.5.4
redhat/cloudforms_management_engine
redhat/openshift
redhat/openstack
redhat/openstack
redhat/openstack_foreman
redhat/satellite
redhat/subscription_asset_manager
redhat/enterprise_mrg
rubygems/nokogiri
< 1.5.4RubyGems
Timeline
Published
Feb 19, 2020
Tracked Since
Feb 18, 2026