CWE-112

8 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 0High 2Medium 5Low 1Not scored 0

CVEs per yearBy the year they were published

CVE-2026-1190
Org.keycloak/keycloak-services: keycloak saml brokering: response delay due to unchecked notonorafter in subjectconfirmationdata
Red Hat · Red Hat build of Keycloak 26.4
Low3.1
CVE-2025-68493
Apache Struts, Apache Struts: XXE vulnerability in outdated XWork component
Apache Software Foundation · Apache Struts
High8.1
CVE-2023-40310
Missing XML Validation vulnerability in SAP PowerDesigner Client BPMN2 import
SAP_SE · SAP PowerDesigner Client
Medium6.5
CVE-2021-27780
HCL BigFix Mobile / Modern Client Management is vulnerable to unauthenticated XML interaction
HCL Software · HCL BigFix Mobile / Modern Client Management
Medium5.3
CVE-2022-28213
When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML…
SAP SE · SAP BusinessObjects Business Intelligence Platform
High8.1
CVE-2021-1359
Cisco Web Security Appliance Privilege Escalation Vulnerability
Cisco · Cisco Web Security Appliance (WSA)
Medium6.3
CVE-2020-27282
In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an XML validation vulnerability in the ventilator allows privileged attackers with physical…
Hamilton Medical AG, T1-Ventillator
Medium4.3
CVE-2020-1975
Missing XML Validation in PAN-OS Web Interface
Palo Alto Networks · PAN-OS
Medium6.8