CWE-112

8 CVEs classified under CWE-112. Browse by severity and year.

Top CVEs for CWE-112
CVESeverityScorePublishedSummary
CVE-2025-68493High8.12026-01-11Missing XML Validation vulnerability in Apache Struts, Apache Struts. This issue affects Apache Struts: from 2.0.0 before 2.2.1; Apache Struts: from 2.2.1 thr…
CVE-2022-28213High8.12022-04-12When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML docume…
CVE-2020-1975Medium6.82020-02-12Missing XML validation vulnerability in the PAN-OS web interface on Palo Alto Networks PAN-OS software allows authenticated users to inject arbitrary XML that…
CVE-2023-40310Medium6.52023-10-10SAP PowerDesigner Client - version 16.7, does not sufficiently validate BPMN2 XML document imported from an untrusted source. As a result, URLs of external ent…
CVE-2021-1359Medium6.32021-07-08A vulnerability in the configuration management of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perfor…
CVE-2021-27780Medium5.32022-05-27The software may be vulnerable to both Un-Auth XML interaction and unauthenticated device enrollment.
CVE-2020-27282Medium4.32021-03-15In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an XML validation vulnerability in the ventilator allows privileged attackers with physical acc…
CVE-2026-1190Low3.12026-01-26A flaw was found in Keycloak's SAML brokering functionality. When Keycloak is configured as a client in a Security Assertion Markup Language (SAML) setup, it f…
All CVEs classified under CWE-112 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-1190Low3.12026-01-26A flaw was found in Keycloak's SAML brokering functionality. When Keycloak is configured as a client in a Security Assertion Markup Language (SAML) setup, it f…
CVE-2025-68493High8.12026-01-11Missing XML Validation vulnerability in Apache Struts, Apache Struts. This issue affects Apache Struts: from 2.0.0 before 2.2.1; Apache Struts: from 2.2.1 thr…
CVE-2023-40310Medium6.52023-10-10SAP PowerDesigner Client - version 16.7, does not sufficiently validate BPMN2 XML document imported from an untrusted source. As a result, URLs of external ent…
CVE-2021-27780Medium5.32022-05-27The software may be vulnerable to both Un-Auth XML interaction and unauthenticated device enrollment.
CVE-2022-28213High8.12022-04-12When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML docume…
CVE-2021-1359Medium6.32021-07-08A vulnerability in the configuration management of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perfor…
CVE-2020-27282Medium4.32021-03-15In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an XML validation vulnerability in the ventilator allows privileged attackers with physical acc…
CVE-2020-1975Medium6.82020-02-12Missing XML validation vulnerability in the PAN-OS web interface on Palo Alto Networks PAN-OS software allows authenticated users to inject arbitrary XML that…