Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
jgraph mxgraph vulnerabilities and exploits
(subscribe to this query)
668
VMScore
CVE-2017-18197
In mxGraphViewImageReader.java in mxGraph prior to 3.7.6, the SAXParserFactory instance in convert() is missing flags to prevent XML External Entity (XXE) attacks, as demonstrated by /ServerView.
Jgraph Mxgraph
NA
CVE-2022-40440
mxGraph v4.2.2 exists to contain a cross-site scripting (XSS) vulnerability via the setTooltips() function.
Jgraph Mxgraph 4.2.2
383
VMScore
CVE-2019-13127
An issue exists in mxGraph up to and including 4.0.0, related to the "draw.io Diagrams" plugin prior to 8.3.14 for Confluence and other products. Improper input validation/sanitization of a color field leads to XSS. This is associated with javascript/examples/graphedito...
Draw Draw.io Diagrams
Jgraph Mxgraph
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4946
CVE-2024-30309
CVE-2024-4761
CVE-2024-30051
type confusion
memory leak
CVE-2024-30293
reflected XSS
CVE-2024-3126
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started