CVE-2019-5918
CRITICALNablarch 5 and 5u1-5u13 - XML External Entity Injection
Title source: manualDescription
Nablarch 5 (5, and 5u1 to 5u13) allows remote attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.
References (2)
Core 2
Core References
Third Party Advisory x_refsource_misc
https://nablarch.atlassian.net/projects/NAB/issues/NAB-295
Third Party Advisory third-party-advisory
x_refsource_jvn
http://jvn.jp/en/jp/JVN56542712/index.html
Scores
CVSS v3
9.1
EPSS
0.0186
EPSS Percentile
76.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Details
CWE
CWE-611
Status
published
Products (3)
nablarch_project/nablarch
5
nablarch_project/nablarch
5u1
nablarch_project/nablarch
5u13
Published
Mar 12, 2019
Tracked Since
Feb 18, 2026