CWE-91— XML Injection
The product does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system.— MITRE CWE catalog
173 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-91page 4 of 4
- CVE-2025-7473MEDIUMCVSS 5.3EG 5.32025-10-21
Zohocorp ManageEngine EndPoint Central versions 11.4.2516.1 and prior are vulnerable to XML Injection.
- CVE-2025-47184MEDIUMCVSS 5.3EG 5.32025-08-21
An XML external entities (XXE) injection vulnerability in the /init API endpoint in Exagid EX10 before 6.4.0 P20, 7.0.1 P12, and 7.2.0 P08 allows an authenticated, unprivileged attacker to achieve information disclosure and privilege escal…
- CVE-2023-35858MEDIUMCVSS 5.3EG 5.32024-06-13
XPath Injection vulnerabilities in the blog and RSS functions of Modern Campus - Omni CMS 2023.1 allow a remote, unauthenticated attacker to obtain application information.
- CVE-2024-33858MEDIUMCVSS 5.3EG 5.32024-05-07
An issue was discovered in Logpoint before 7.4.0. A path injection vulnerability is seen while adding a CSV enrichment source. The source_name parameter could be changed to an absolute path; this will write the CSV file to that path inside…
- CVE-2023-22485MEDIUMCVSS 5.3EG 5.32023-01-24
cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions prior 0.29.0.gfm.7, a crafted markdown document can trigger an out-of-bounds read in the `validate_protocol` function. We believe…
- CVE-2022-22244MEDIUMCVSS 5.3EG 5.32022-10-18
An XPath Injection vulnerability in the J-Web component of Juniper Networks Junos OS allows an unauthenticated attacker sending a crafted POST to reach the XPath channel, which may allow chaining to other unspecified vulnerabilities, leadi…
- CVE-2022-25356MEDIUMCVSS 5.3EG 5.32022-04-05
Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML Injection.
- CVE-2020-6260MEDIUMCVSS 5.3EG 5.32020-06-10
SAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to inject superflous data that can be displayed by the application, due to Incomplete XML Validation. The application shows additional data that do not actually exist.
- CVE-2016-2932MEDIUMCVSS 5.3EG 5.32016-11-30
IBM BigFix Remote Control before 9.1.3 allows remote attackers to conduct XML injection attacks via unspecified vectors.
- CVE-2026-24329MEDIUMCVSS 4.9EG 4.92026-08-11
A flaw was found in wildfly-core. A remote user authenticated as an administrative user can inject a malformed payload into the Inet Address field through the Management Model. This injection causes the server to crash and become unrecover…
- CVE-2026-59728MEDIUMCVSS 4.3EG 4.32026-07-20
Astro is a web framework for content-driven websites. In versions 1.0.0 through 4.0.18, the source.title and enclosure.type item fields in packages/astro-rss/src/index.ts are interpolated directly into XML template strings without XML-char…
- CVE-2025-54251MEDIUMCVSS 4.3EG 4.32025-09-09
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an XML Injection vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate XML queries and…
- CVE-2024-2648MEDIUMCVSS 4.3EG 4.32024-03-19
A vulnerability, which was classified as problematic, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown function of the file /nac/naccheck.php. The manipulation of the argument username leads to imprope…
- CVE-2024-2645MEDIUMCVSS 4.3EG 4.32024-03-19
A vulnerability classified as problematic has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /vpnweb/resetpwd/resetpwd.php. The manipulation of the argument UserId leads to imprope…
- CVE-2022-4245MEDIUMCVSS 4.3EG 4.32023-09-25
A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allo…
- CVE-2022-22243MEDIUMCVSS 4.3EG 4.32022-10-18
An XPath Injection vulnerability due to Improper Input Validation in the J-Web component of Juniper Networks Junos OS allows an authenticated attacker to add an XPath command to the XPath stream, which may allow chaining to other unspecifi…
- CVE-2026-1554MEDIUMCVSS 4.2EG 4.22026-02-04
XML Injection (aka Blind XPath Injection) vulnerability in Drupal Central Authentication System (CAS) Server allows Privilege Escalation.This issue affects Central Authentication System (CAS) Server: from 0.0.0 before 2.0.3, from 2.1.0 bef…
- CVE-2026-15037LOWCVSS 2.9EG 2.92026-07-23
Improper output neutralization (XML injection) in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized by an application into those nodes to inject arbitrary XML m…
- CVE-2026-66294LOWCVSS 2.1EG 2.12026-11-06
XML injection in the Saxy XML encoder. Saxy.Encoder.cdata/1 serializes a {:cdata, characters} node by wrapping the supplied characters between <![CDATA[ and ]]> and passing the payload through byte for byte. The encoder's character-data an…
- CVE-2026-66295LOWCVSS 2.1EG 2.12026-11-06
Saxy's XML encoder writes the target and the content of a processing instruction into the output document verbatim, without validation or escaping. The encoder builds the construct by concatenating both fields between <? and ?>, so neither…
- CVE-2026-66293LOWCVSS 2.1EG 2.12026-11-06
XML injection in the encoder of Saxy. Saxy.Encoder does not neutralize the -- sequence in XML comment content: escape_comment/2 returns the comment binary unchanged in every clause and only appends a space when the comment ends in a single…
- CVE-2026-48590LOWCVSS 2.1EG 2.12026-08-21
XML Injection vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xml_builder.ex and program routines XmlBuilder.generate/1, XmlBuilder.…
- CVE-2026-47080LOWCVSS 2.1EG 2.12026-08-21
XML Injection vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xml_builder.ex and program routines XmlBuilder.generate/1, XmlBuilder.…
Map vulnerabilities like CWE-91 to your infrastructure
EchelonGraph correlates every CVE — across CWE-91 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →