CVE-2019-20191

HIGH

Oxygen XML Editor < 21.1.1 - XML External Entity Injection

Title source: llm

Oxygen XML Editor 21.1.1 allows XXE to read any file.

Core 1

Core References

Various Sources x_refsource_misc

CVSS v3 7.5

EPSS 0.0115

EPSS Percentile 62.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-611

Status published

Products (3)

sync/oxygen_xml_author < 21.1

sync/oxygen_xml_developer < 21.1

sync/oxygen_xml_editor < 21.1.1

Published Mar 16, 2020

Tracked Since Feb 18, 2026