CVE-2019-3773

—

CVSS 3.1

9.8 critical

EPSS

4%p90

Published

Jan 18, 2019 (Jan 18, 2019)

Modified

Sep 4, 2026

Description

Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of all three projects, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.

Vendors: broadcom oracle
Products: spring web services, financial services analytical applications infrastructure, flexcube private banking
Weakness: CWE-611
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.1%)

In the news0 stories

No ingested article mentions this CVE yet.