VULNERABILITY INTELLIGENCE

CVE-2019-3773

CVSS score9.8 CRITICAL
EPSS probability4.14%
CISA KEVNot currently listed
Published2019-01-18
Last modified2026-09-04
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of all three projects, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.

Weakness classification

  • security_alert@emc.com: CWE-611
  • nvd@nist.gov: CWE-611

Primary references