CWE-643 · Injection and Smuggling
Improper Neutralization of Data within XPath Expressions
18CVEs
SortMost likely exploited
18 CVEs with CWE-643 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-36433Microsoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityMicrosoft · Microsoft Dynamics 365 (on-premises) version 9.0 · CVSS 6.5 · 2023-10-10 | 6.5 | 2.2% | 2023-10-10 |
| CVE-2023-36429Microsoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityMicrosoft · Microsoft Dynamics 365 (on-premises) version 9.0 · CVSS 6.5 · 2023-10-10 | 6.5 | 2.2% | 2023-10-10 |
| CVE-2020-25162B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplusB. Braun Melsungen AG · SpaceCom · CVSS 7.5 · 2022-04-14 | 7.5 | 1.9% | 2022-04-14 |
| CVE-2023-24922Microsoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityMicrosoft · Microsoft Dynamics 365 (on-premises) version 9.0 · CVSS 6.5 · 2023-03-14 | 6.5 | 1.5% | 2023-03-14 |
| CVE-2026-24343Apache HertzBeat: Uncontrolled Resource Consumption via Crafted XPath ExpressionsApache Software Foundation · Apache HertzBeat · CVSS 8.8 · 2026-02-10 | 8.8 | 0.7% | 2026-02-10 |
| CVE-2024-2648Netentsec NS-ASG Application Security Gateway naccheck.php xpath injectionNetentsec · NS-ASG Application Security Gateway · CVSS 4.3 · 2024-03-19 | 4.3 | 0.7% | 2024-03-19 |
| CVE-2024-2645Netentsec NS-ASG Application Security Gateway resetpwd.php xpath injectionNetentsec · NS-ASG Application Security Gateway · CVSS 4.3 · 2024-03-19 | 4.3 | 0.7% | 2024-03-19 |
| CVE-2026-53582OPNsense: XPATH Injection can disclose any secret in config.xmlopnsense · core · CVSS 7.1 · 2026-10-15 | 7.1 | 0.7% | 2026-10-15 |
| CVE-2026-44962Plesk contains an XPath injection vulnerability in the APS Application Catalog search functionality, where user-supplied input is interpolated into XPath queries without proper sa…WebPros · Plesk · CVSS 9.9 · 2026-05-29 | 9.9 | 0.7% | 2026-05-29 |
| CVE-2024-39565Junos OS: J-Web: An unauthenticated, network-based attacker can perform XPATH injection attack against a device.Juniper Networks, Inc. · Junos OS · CVSS 8.8 · 2024-07-10 | 8.8 | 0.5% | 2024-07-10 |
| CVE-2026-9390XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookupTIMLEGGE · XML::Sig · CVSS 9.1 · 2026-08-03 | 9.1 | 0.5% | 2026-08-03 |
| CVE-2025-20218Cisco Secure Firepower Management Center Software XPATH Injection VulnerabilityCisco · Cisco Firepower Management Center · CVSS 4.9 · 2025-08-14 | 4.9 | 0.5% | 2025-08-14 |
| CVE-2026-114442Apache HertzBeat: incomplete XPath expression validation in aliasFieldsApache Software Foundation · Apache HertzBeat · CVSS 6.5 · 2026-11-03 | 6.5 | 0.5% | 2026-11-03 |
| CVE-2026-11864Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.IBM · Cloud Pak for Business Automation · CVSS 6.5 · 2026-09-15 | 6.5 | 0.4% | 2026-09-15 |
| CVE-2026-58395OPNsense: XPath injection in MVC safe-deleteopnsense · core · CVSS 4.3 · 2026-10-15 | 4.3 | 0.4% | 2026-10-15 |
| CVE-2022-43840IBM Aspera Console XPath injectionIBM · Aspera Console · CVSS 4.3 · 2025-04-14 | 4.3 | 0.3% | 2025-04-14 |
| CVE-2025-11844XPath Injection in Hugging Face Smolagents search_item_ctrl_f Functionhuggingface · huggingface/smolagents · CVSS 5.4 · 2025-10-22 | 5.4 | 0.3% | 2025-10-22 |
| CVE-2026-40699BIG-IP Configuration utility vulnerabilityF5 · BIG-IP · CVSS 6.5 · 2026-05-13 | 6.5 | 0.3% | 2026-05-13 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.