VULNERABILITY INTELLIGENCE
CVE-2015-0250
CVSS score6.4 NONE
EPSS probability16.56%
CISA KEVNot currently listed
Published2015-03-24
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:P
Description
XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.
Weakness classification
- nvd@nist.gov: NVD-CWE-Other