agentprime: CWE-112

Keycloak's missing timestamp validation allows attackers to extend SAML response validity periods

Mon, 26 Jan 2026 21:30:36 GMT

org.keycloak:keycloak-services <=26.5.2, no fixed version yet. CVSS 3.1 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Apache Struts 2 is Missing XML Validation

Sun, 11 Jan 2026 15:31:59 GMT

com.opensymphony:xwork >=2.0.0, no fixed version yet. CVSS 8.1 (High). Critical: CVSS score 8.1 (7.0 or more) and EPSS 0.50 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2023-40310: Missing XML Validation vulnerability in SAP PowerDesigner Client BPMN2 import

Tue, 10 Oct 2023 01:35:28 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-27780: HCL BigFix Mobile / Modern Client Management is vulnerable to unauthenticated XML interaction

Fri, 27 May 2022 16:15:15 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Missing XML Validation in Apache Tomcat

Sat, 14 May 2022 01:10:18 GMT

org.apache.tomcat:tomcat <6.0.40 || >=7.0.0, <7.0.54 || >=8.0.0, <8.0.6, fixed in 6.0.40, 7.0.54, 8.0.6. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Missing XML Validation in Apache CXF

Fri, 13 May 2022 01:09:20 GMT

org.apache.cxf:cxf-rt-frontend-jaxrs >=2.5.0, <2.5.10 || >=2.6.0, <2.6.7 || >=2.7.0, <2.7.4, fixed in 2.5.10, 2.6.7, 2.7.4. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Missing XML Validation in Spring Framework

Fri, 13 May 2022 01:02:38 GMT

org.springframework:spring-oxm <3.2.4.RELEASE, fixed in 3.2.4.RELEASE. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Missing XML Validation in Apache Xerces2

Fri, 13 May 2022 01:01:06 GMT

xerces:xercesImpl <2.12.0, fixed in 2.12.0. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2022-28213: SAP SE SAP BusinessObjects Business Intelligence Platform: When a user access SOAP Web services in SAP BusinessObjects Business Intelligence…

Tue, 12 Apr 2022 16:11:27 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-1359: Cisco Web Security Appliance Privilege Escalation Vulnerability

Thu, 08 Jul 2021 18:35:10 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2020-27282: In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an XML validation vulnerability in the ventilator allows privileged attackers with physical access to render the device persistently un…

Mon, 15 Mar 2021 21:21:54 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2020-1975: Missing XML Validation in PAN-OS Web Interface

Wed, 12 Feb 2020 22:57:08 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.