1. Home
  2. Vulnerabilities
  3. CVE-2019-9628

CVE-2019-9628

CVSS v3.1 7.5 (High)
75% Progress
CVSS v2.0 5 (Medium)
50% Progress
EPSS 2.46 % (90th)
2.46% Progress
Affected Products 3
Advisories 6
Info CVSS EPSS Affected Configurations References Security Advisories Packages & Software OVAL Tools, Exploits & PoC Graph Web & Social Timeline

The XMLTooling library all versions prior to V3.0.4, provided with the OpenSAML and Shibboleth Service Provider software, contains an XML parsing class. Invalid data in the XML declaration causes an exception of a type that was not handled properly in the parser class and propagates an unexpected exception type.

Weaknesses
CWE-755
Improper Handling of Exceptional Conditions
CVE Status
PUBLISHED
CNA
MITRE
Published Date
2019-04-11 20:29:00
(5 years ago)
Updated Date
2022-04-18 17:32:48
(2 years ago)

Affected Products

Canonical

Opensuse

Xmltooling Project

Configuration #1

    CPE23 From Up To
  Xmltooling Project Xmltooling prior 3.0.4 version cpe:2.3:a:xmltooling_project:xmltooling < 3.0.4

Configuration #2

    CPE23 From Up To
  Canonical Ubuntu Linux 14.04 cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts
  Canonical Ubuntu Linux 16.04 cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts
  Canonical Ubuntu Linux 18.04 cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts
  Canonical Ubuntu Linux 18.10 cpe:2.3:o:canonical:ubuntu_linux:18.10

Configuration #3

    CPE23 From Up To
  Opensuse Leap 15.0 cpe:2.3:o:opensuse:leap:15.0
  Opensuse Leap 42.3 cpe:2.3:o:opensuse:leap:42.3