Siemens Solid Edge XML External Entity Injection Vulnerability

Siemens Solid Edge is a 3D CAD software from Siemens, Germany. The software can be used in industries such as part design, assembly design, sheet metal design, welding design, etc. A security vulnerability exists in previous versions of Siemens Solid Edge SE2021 SE2021MP7, which stems from an XML external entity injection vulnerability in the underlying XML parser that could lead to affected applications by loading specially crafted xml files to, and remote attackers could exploit the vulnerability to compromise arbitrary files.