CWE-776 · Denial of Service
Improper Restriction of Recursive Entity References in DTDs
88CVEs
SortMost likely exploited
88 CVEs with CWE-776 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2009-1955The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows…Apache · Apr-Util · 2009-06-06 | – | 53% | 2009-06-06 |
| CVE-2017-18640The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.Snakeyaml Project · Snakeyaml · 2019-12-12 | – | 27% | 2019-12-12 |
| CVE-2019-12401Solr versions 1.3.0 to 1.4.1, 3.1.0 to 3.6.2 and 4.0.0 to 4.10.4 are vulnerable to an XML resource consumption attack (a.k.a. Lol Bomb) via it’s update handler.?By leveraging XML…Apache · Solr · 2019-09-10 | – | 8.5% | 2019-09-10 |
| CVE-2021-23926XMLBeans XML Entity ExpansionApache Software Foundation · Apache XMLBeans · 2021-01-14 | – | 6.3% | 2021-01-14 |
| CVE-2022-0217It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker in…Prosody · prosody · 2022-08-26 | – | 5.2% | 2022-08-26 |
| CVE-2019-5427c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading config…Mchange · c3p0 · 2019-04-22 | – | 4.9% | 2019-04-22 |
| CVE-2017-5644Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially crafted OOXML file, aka an XML Entity Expansion…Apache Software Foundation · Apache POI · 2017-03-24 | – | 4.6% | 2017-03-24 |
| CVE-2011-1755jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a cr…Jabberd2 · Jabberd2 · 2011-06-21 | – | 3.7% | 2011-06-21 |
| CVE-2014-2228The XStream extension in HP Fortify SCA before 2.2 RC3 allows remote attackers to execute arbitrary code via unsafe deserialization of XML messages.Talend · Restlet · 2020-02-19 | – | 3.3% | 2020-02-19 |
| CVE-2022-25857Denial of Service (DoS)Snakeyaml Project · org.yaml:snakeyaml · CVSS 7.5 · 2022-08-30 | 7.5 | 2.9% | 2022-08-30 |
| CVE-2008-3281libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service…Xmlsoft · Libxml2 · 2008-08-27 | – | 2.5% | 2008-08-27 |
| CVE-2015-9541Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564.Qt · Qt · 2020-01-24 | – | 2.5% | 2020-01-24 |
| CVE-2013-4335opOpenSocialPlugin 0.8.2.1, > 0.9.9.2, 0.9.13, 1.2.6: Multiple XML External Entity Injection VulnerabilitiesopOpenSocialPlugin · opOpenSocialPlugin · 2020-02-07 | – | 2.5% | 2020-02-07 |
| CVE-2019-20104The OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0 before 3.7.1 allows remote attackers to perform a Denial of Service attack via an XML…Atlassian · Crowd · 2020-02-06 | – | 2.4% | 2020-02-06 |
| CVE-2013-6461Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limitsRuby · Nokogiri gem · 2019-11-05 | – | 2.2% | 2019-11-05 |
| CVE-2020-5227Feedgen Vulnerable to XML Denial of Service Attackslkiesow · python-feedgen · CVSS 4.4 · 2020-01-28 | 4.4 | 2.2% | 2020-01-28 |
| CVE-2012-6685Nokogiri before 1.5.4 is vulnerable to XXE attacksNokogiri · Nokogiri · 2020-02-19 | – | 2.2% | 2020-02-19 |
| CVE-2013-6460Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documentsRuby · Nokogiri gem · 2019-11-05 | – | 2.1% | 2019-11-05 |
| CVE-2021-3541A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.Xmlsoft · libxml2 · 2021-07-09 | – | 2.1% | 2021-07-09 |
| CVE-2024-28757libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).Siemens · SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) · CVSS 7.5 · 2024-03-10 | 7.5 | 2.0% | 2024-03-10 |
| CVE-2022-26662An XML Entity Expansion (XEE) issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Ap…Tryton · Proteus · 2022-03-07 | – | 2.0% | 2022-03-07 |
| CVE-2022-33977untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts recursive entity references in DTDs. By exploiting thi…Christian Stefanescu · untangle · 2022-07-26 | – | 1.8% | 2022-07-26 |
| CVE-2011-3288Cisco Unified Presence before 8.5(4) does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consump…Cisco · Unified Presence · 2011-10-06 | – | 1.8% | 2011-10-06 |
| CVE-2019-15160The SweetXml (aka sweet_xml) package through 0.6.6 for Erlang and Elixir allows attackers to cause a denial of service (resource consumption) via an XML entity expansion attack wi…Kbrw · Sweet Xml · 2019-08-19 | – | 1.7% | 2019-08-19 |
| CVE-2003-1564libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU c…Xmlsoft · Libxml2 · 2008-09-02 | – | 1.6% | 2008-09-02 |
| CVE-2019-5442XML Entity Expansion (Billion Laughs Attack) on Pippo 1.12.0 results in Denial of Service.Entities are created recursively and large amounts of heap memory is taken. Eventually, t…Pippo · Pippo · 2019-06-12 | – | 1.4% | 2019-06-12 |
| CVE-2023-3569PHOENIX CONTACT: Denial-of-Service due to malicious XML files in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENTPHOENIX CONTACT · CLOUD CLIENT 1101T-TX/TX · CVSS 4.9 · 2023-08-08 | 4.9 | 1.4% | 2023-08-08 |
| CVE-2021-20464IBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7) could be vulnerable to an XML Bomb attack by a malicious authenticated user. IBM X-Force ID: 19681…IBM · Cognos Analytics · CVSS 6.5 · 2022-04-22 | 6.5 | 1.4% | 2022-04-22 |
| CVE-2020-11462An issue was discovered in OpenVPN Access Server before 2.7.0 and 2.8.x before 2.8.3. With the full featured RPC2 interface enabled, it is possible to achieve a temporary DoS stat…Openvpn · Openvpn Access Server · 2020-05-04 | – | 1.3% | 2020-05-04 |
| CVE-2020-24590The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML Entity Expansion attacks.Wso2 · Api Manager · CVSS 9.1 · 2020-08-21 | 9.1 | 1.3% | 2020-08-21 |
| CVE-2021-32623Opencast vulnerable to billion laughs attack (XML bomb)opencast · opencast · CVSS 8.1 · 2021-06-15 | 8.1 | 1.3% | 2021-06-15 |
| CVE-2024-43398REXML denial of service vulnerabilityruby · rexml · CVSS 5.9 · 2024-08-22 | 5.9 | 1.2% | 2024-08-22 |
| CVE-2024-27141Pre-authenticated Time-Based Blind XXE injectionToshiba Tec Corporation · Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 5.9 · 2024-06-14 | 5.9 | 1.1% | 2024-06-14 |
| CVE-2020-24665The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains an XML Entity Expansion injection vulnerability, which allows an authenticated remote users to trigger a…Hitachi · Vantara Pentaho · 2021-01-29 | – | 1.1% | 2021-01-29 |
| CVE-2021-41559Silverstripe silverstripe/framework 4.8.1 has a quadratic blowup in Convert::xml2array() that enables a remote attack via a crafted XML document.Silverstripe · Silverstripe · 2022-06-28 | – | 1.1% | 2022-06-28 |
| CVE-2012-3340IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to XML external entity injection, caused by improper validation of user-supplied input. A remote authenticated attacker co…IBM · InfoSphere Guardium · CVSS 4.3 · 2020-09-01 | 4.3 | 1.1% | 2020-09-01 |
| CVE-2022-44641In Linaro Automated Validation Architecture (LAVA) before 2022.11, users with valid credentials can submit crafted XMLRPC requests that cause a recursive XML entity expansion, lea…Linaro · Lava · CVSS 6.5 · 2022-11-18 | 6.5 | 1.1% | 2022-11-18 |
| CVE-2020-2172Jenkins Code Coverage API Plugin 1.1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.Jenkins project · Jenkins Code Coverage API Plugin · 2020-04-07 | – | 1.1% | 2020-04-07 |
| CVE-2020-3946InstallBuilder AutoUpdate tool and regular installers enabling <checkForUpdates> built with versions earlier than 19.11 are vulnerable to Billion laughs attack (denial-of-service).VMware · InstallBuilder · 2020-04-20 | – | 1.0% | 2020-04-20 |
| CVE-2021-1267Cisco Firepower Management Center XML Entity Expansion VulnerabilityCisco · Cisco Firepower Management Center · CVSS 4.3 · 2021-01-13 | 4.3 | 1.0% | 2021-01-13 |
| CVE-2021-38490Altova MobileTogether Server before 7.3 SP1 allows XML exponential entity expansion, a different vulnerability than CVE-2021-37425.Altova · Mobiletogether Server · 2021-08-10 | – | 1.0% | 2021-08-10 |
| CVE-2023-28118kaml has potential denial of service while parsing input with anchors and aliasescharleskorn · kaml · CVSS 7.5 · 2023-03-20 | 7.5 | 1.0% | 2023-03-20 |
| CVE-2021-40511OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion (aka “billion laughs”) attack allowing denial of service.Obdasystems · Mastro · 2022-06-21 | – | 1.0% | 2022-06-21 |
| CVE-2026-26278fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit)NaturalIntelligence · fast-xml-parser · CVSS 7.5 · 2026-02-19 | 7.5 | 0.9% | 2026-02-19 |
| CVE-2020-6856An XML External Entity (XEE) vulnerability exists in the JOC Cockpit component of SOS JobScheduler 1.12 and 1.13.2 allows attackers to read files from the server via an entity dec…Sos-Berlin · Jobscheduler · 2020-02-06 | – | 0.9% | 2020-02-06 |
| CVE-2024-27142Pre-authenticated XXE injectionToshiba Tec Corporation · Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 5.9 · 2024-06-14 | 5.9 | 0.9% | 2024-06-14 |
| CVE-2020-15303Infoblox NIOS before 8.5.2 allows entity expansion during an XML upload operation, a related issue to CVE-2003-1564.Infoblox · Nios · 2021-06-28 | – | 0.9% | 2021-06-28 |
| CVE-2019-19144XML External Entity Injection vulnerability in Quantum DXi6702 2.3.0.3 (11449-53631 Build304) devices via rest/Users?action=authenticate.No vendor recorded · CVSS 9.8 · 2025-08-01 | 9.8 | 0.8% | 2025-08-01 |
| CVE-2023-41635A XML External Entity (XXE) vulnerability in the VerifichePeriodiche.aspx component of GruppoSCAI RealGimm v1.1.37p38 allows attackers to read any file in the filesystem via suppl…Grupposcai · Realgimm · 2023-08-31 | – | 0.8% | 2023-08-31 |
| CVE-2022-34467A vulnerability has been identified in Mendix Excel Importer Module (Mendix 8 compatible) (All versions < V9.2.2), Mendix Excel Importer Module (Mendix 9 compatible) (All versions…Siemens · Mendix Excel Importer Module (Mendix 8 compatible) · 2022-07-12 | – | 0.8% | 2022-07-12 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.