Realobjects Pdfreactor
2 CVEs affecting Realobjects Pdfreactor. Latest disclosed: 2019-06-11. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-12153 | Critical | 10.0 | 2019-06-11 | Lack of validation in the HTML parser in RealObjects PDFreactor before 10.1.10722 leads to SSRF, allowing attackers to access network or file resources on beha… |
CVE-2019-12154 | Critical | 9.1 | 2019-06-11 | XXE in the XML parser library in RealObjects PDFreactor before 10.1.10722 allows attackers to supply malicious XML content in externally referenced resources… |