Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
9.4
CVSSv2

CVE-2019-13625

Published: 17/07/2019 Updated: 19/07/2019
CVSS v2 Base Score: 9.4 | Impact Score: 9.2 | Exploitability Score: 10
CVSS v3 Base Score: 9.1 | Impact Score: 5.2 | Exploitability Score: 3.9
VMScore: 837
Vector: AV:N/AC:L/Au:N/C:N/I:C/A:C
Subscribe to Ghidra

Vulnerability Summary

NSA Ghidra prior to 9.0.1 allows XXE when a project is opened or restored, or a tool is imported, as demonstrated by a project.prp file.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

nsa ghidra

References

CWE-611http://blog.fxiao.me/ghidra/https://xlab.tencent.com/en/2019/03/18/ghidra-from-xxe-to-rce/https://github.com/NationalSecurityAgency/ghidra/issues/71https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27975CVE-2024-2961CVE-2024-20380XML injectionHTML injectionCVE-2024-29204CVE-2023-51795memory leakCVE-2024-3470
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook