https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:19:37.623058+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-01085 cnvd-2018-01085 2026-10-03T08:19:37.699840+00:00 cnvd-2018-01085 https://cve.radiocsirt.org/vuln/euvd-2026-74768 EUVD-2026-74768 2026-10-03T08:19:37.699881+00:00 EUVD-2026-74768 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7545 fkie_cve-2017-7545 2026-10-03T08:19:37.699896+00:00

It was discovered that the XmlUtils class in jbpmmigration 6.5 performed expansion of external parameter entities while parsing XML files. A remote attacker could use this flaw to read files accessible to the user running the application server and, potentially, perform other more advanced XML eXternal Entity (XXE) attacks.

 https://cve.radiocsirt.org/vuln/ghsa-vc3x-72q4-g3p5 GHSA-vc3x-72q4-g3p5 — XML External Entity Reference in jbpmmigration 2026-10-03T08:19:37.699928+00:00

Affected: Maven: org.jbpm.jbpm5:jbpmmigration

It was discovered that the XmlUtils class in jbpmmigration performed expansion of external parameter entities while parsing XML files. A remote attacker could use this flaw to read files accessible to the user running the application server and, potentially, perform other more advanced XML eXternal Entity (XXE) attacks.

The related jbpm-designer project removed use of jbpmmigration completely as a result.

 https://cve.radiocsirt.org/vuln/gsd-2017-7545 gsd-2017-7545 2026-10-03T08:19:37.699954+00:00 gsd-2017-7545 https://cve.radiocsirt.org/vuln/rhsa-2017:3354 RHSA-2017:3354 — Red Hat Security Advisory: Red Hat JBoss BRMS 6.4.7 security update 2026-10-03T08:19:37.699966+00:00

zookeeper: Incorrect input validation with wchp/wchc four letter words jbpmmigration: XXE vulnerability in XmlUtils