CWE-112 · Injection and Smuggling
Missing XML Validation
7CVEs
SortMost likely exploited
7 CVEs with CWE-112 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-28213When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML document accepted from an…SAP SE · SAP BusinessObjects Business Intelligence Platform · 2022-04-12 | – | 12% | 2022-04-12 |
| CVE-2023-40310Missing XML Validation vulnerability in SAP PowerDesigner Client BPMN2 importSAP_SE · SAP PowerDesigner Client · CVSS 6.5 · 2023-10-10 | 6.5 | 3.6% | 2023-10-10 |
| CVE-2021-1359Cisco Web Security Appliance Privilege Escalation VulnerabilityCisco · Cisco Web Security Appliance (WSA) · CVSS 6.3 · 2021-07-08 | 6.3 | 1.9% | 2021-07-08 |
| CVE-2020-1975Missing XML Validation in PAN-OS Web InterfacePalo Alto Networks · PAN-OS · CVSS 6.8 · 2020-02-12 | 6.8 | 1.0% | 2020-02-12 |
| CVE-2021-27780HCL BigFix Mobile / Modern Client Management is vulnerable to unauthenticated XML interactionHCL Software · HCL BigFix Mobile / Modern Client Management · CVSS 5.3 · 2022-05-27 | 5.3 | 0.8% | 2022-05-27 |
| CVE-2026-1190Org.keycloak/keycloak-services: keycloak saml brokering: response delay due to unchecked notonorafter in subjectconfirmationdataRed Hat · Red Hat build of Keycloak 26.4 · CVSS 3.1 · 2026-01-26 | 3.1 | 0.4% | 2026-01-26 |
| CVE-2020-27282In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an XML validation vulnerability in the ventilator allows privileged attackers with physical access to render the de…Hamilton-Medical · Hamilton Medical AG, T1-Ventillator · 2021-03-15 | – | 0.3% | 2021-03-15 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.