Lucene search
MitreCVELIST:CVE-2017-9096HistoryNov 08, 2017 - 4:00 p.m.
CVE-2017-9096
2017-11-0816:00:00
mitre
www.cve.org
2
The XML parsers in iText before 5.5.12 and 7.x before 7.0.3 do not disable external entities, which might allow remote attackers to conduct XML external entity (XXE) attacks via a crafted PDF.
References
Related
ibm
ibm
nvd
nvd
CVE-2017-9096
2017-11-08 16:29:00
osv
osv
Improper Restriction of XML External Entity Reference in iText
2022-05-13 01:14:24
CVE-2017-9096
2017-11-08 16:29:00
github
github
Improper Restriction of XML External Entity Reference in iText
2022-05-13 01:14:24
veracode
veracode
XML External Entity (XXE) Injection
2017-11-29 00:51:29
redhatcve
redhatcve
CVE-2017-9096
2017-11-14 08:49:40
prion
prion
Xxe
2017-11-08 16:29:00
cve
cve
CVE-2017-9096
2017-11-08 16:29:00
zdt
zdt
iText PDF Library 7.0.2 / 5.5.11 / 2.0.8 XXE Injection Vulnerability
2017-11-09 00:00:00
nessus
nessus
Oracle Primavera Unifier (Oct 2020 CPU)
2020-10-21 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00