CVE-2019-9628

The XMLTooling library all versions prior to V3.0.4, provided with the OpenSAML and Shibboleth Service Provider software, contains an XML parsing class

published April 11, 2019

CVSS
—
EPSS
2%
Percentile
81.1
In the wild
Unconfirmed
What it is

The XMLTooling library all versions prior to V3.0.4, provided with the OpenSAML and Shibboleth Service Provider software, contains an XML parsing class. Invalid data in the XML declaration causes an exception of a type that was not handled properly in the parser class and propagates an unexpected exception type.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02052 · 81.1th percentile
Published
2019-04-11T19:26Z
EPSS history
Timeline
  • 11 APR 19:26Z
    The XMLTooling library all versions prior to V3.0.4, provided with the OpenSAML and Shibboleth Service Provider software, contains an XML parsing class
    cvelistv5