# XML external entities (XXE).

XML parsers made to read files or reach other hosts. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [All versions before R2022-09 of Talend's Remote Engine Gen 2 are potentially vulnerable to XML External Entity (XXE) type of attacks.](https://agentprime.io/advisories/CVE-2022-45588.md)
  `CVE-2022-45588` · CVE record · CVSS 7.8 High · Not analysed yet · Published 3 Feb 2023 · Tags: XML external entities (XXE)
- [IBM Tivoli Workload Scheduler XML external entity injection](https://agentprime.io/advisories/CVE-2022-38389.md)
  `CVE-2022-38389` · CVE record: IBM Tivoli Workload Scheduler · CVSS 7.1 High · Not analysed yet · Published 2 Feb 2023 · Tags: XML external entities (XXE)
- [IBM Tivoli Workload Scheduler XML external entity injection](https://agentprime.io/advisories/CVE-2022-22486.md)
  `CVE-2022-22486` · CVE record: IBM Tivoli Workload Scheduler · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Feb 2023 · Tags: XML external entities (XXE)
- [Netcad KEOS 1.0 is vulnerable to XML External Entity (XXE) resulting in SSRF with XXE (remote).](https://agentprime.io/advisories/CVE-2022-47873.md)
  `CVE-2022-47873` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Jan 2023 · Tags: XML external entities (XXE)
- [XML external entity injection in OMRON Corporation CX-Motion Pro](https://agentprime.io/advisories/CVE-2023-22322.md)
  `CVE-2023-22322` · CVE record: OMRON Corporation CX-Motion Pro · CVSS 5.5 Medium · Not analysed yet · Published 30 Jan 2023 · Tags: XML external entities (XXE)
- [Agent-to-controller security bypass in Jenkins Semantic Versioning Plugin](https://agentprime.io/advisories/GHSA-pcc2-w6m8-x5w4.md)
  `GHSA-pcc2-w6m8-x5w4`, `CVE-2023-24429` · Maven `org.jenkins-ci.plugins:semantic-versioning-plugin`: affected `<1.15`, fixed in `1.15` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Jan 2023 · Tags: XML external entities (XXE)
- [XML external entity reference vulnerability on agents in Jenkins Semantic Versioning Plugin](https://agentprime.io/advisories/GHSA-h8p8-6378-649p.md)
  `GHSA-h8p8-6378-649p`, `CVE-2023-24430` · Maven `org.jenkins-ci.plugins:semantic-versioning-plugin`: affected `<1.15`, fixed in `1.15` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Jan 2023 · Tags: XML external entities (XXE)
- [XML Entity Expansion in Jenkins TestComplete support Plugin](https://agentprime.io/advisories/GHSA-g5mj-c26g-vmpm.md)
  `GHSA-g5mj-c26g-vmpm`, `CVE-2023-24443` · Maven `org.jenkins-ci.plugins:TestComplete`: affected `<2.9`, fixed in `2.9` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Jan 2023 · Tags: XML external entities (XXE), Denial of service
- [XML external entity vulnerability on agents in Jenkins MSTest Plugin](https://agentprime.io/advisories/GHSA-3ppr-72x5-x67q.md)
  `GHSA-3ppr-72x5-x67q`, `CVE-2023-24441` · Maven `org.jvnet.hudson.plugins:mstest`: affected `<1.0.1`, fixed in `1.0.1` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Jan 2023 · Tags: XML external entities (XXE), Denial of service
- [OpenStack Swift XML external entities (XXE) Injection](https://agentprime.io/advisories/GHSA-274c-rx2j-2v3x.md)
  `GHSA-274c-rx2j-2v3x`, `CVE-2022-47950`, `PYSEC-2026-927` · PyPI `swift`: affected `<2.28.1 || >=2.29.0, <2.29.2 || >=2.30.0, <2.30.1`, fixed in `2.28.1`, `2.29.2`, `2.30.1` · CVSS 6.5 Medium · Not analysed yet · Published 18 Jan 2023 · Tags: Information disclosure, XML external entities (XXE)
- [XML external entity injection in Oracle Corporation Web Services Manager](https://agentprime.io/advisories/CVE-2023-21862.md)
  `CVE-2023-21862` · CVE record: Oracle Corporation Web Services Manager · CVSS 8.1 High · Not analysed yet · Published 17 Jan 2023 · Tags: XML external entities (XXE)
- [Zoho ManageEngine Exchange Reporter Plus before 5708 allows attackers to conduct XXE attacks.](https://agentprime.io/advisories/CVE-2023-22624.md)
  `CVE-2023-22624` · CVE record · CVSS 7.5 High · Not analysed yet · Published 17 Jan 2023 · Tags: XML external entities (XXE)
- [BlueCat Device Registration Portal 2.2 allows XXE attacks that exfiltrate single-line files.](https://agentprime.io/advisories/CVE-2023-23595.md)
  `CVE-2023-23595` · CVE record · CVSS 7.5 High · Not analysed yet · Published 15 Jan 2023 · Tags: XML external entities (XXE)
- [Talend Open Studio for MDM XML xml external entity reference](https://agentprime.io/advisories/CVE-2021-4311.md)
  `CVE-2021-4311` · CVE record: Talend Open Studio for MDM · CVSS 5.5 Medium · Not analysed yet · Published 9 Jan 2023 · Tags: XML external entities (XXE)
- [kelvinmo simplexrd vulnerable to Improper Restriction of XML External Entity Reference](https://agentprime.io/advisories/GHSA-rh3m-pr36-xh2f.md)
  `GHSA-rh3m-pr36-xh2f`, `CVE-2015-10029`, `PKSA-7rgs-p1xm-5bmq` · Packagist `kelvinmo/simplexrd`: affected `<3.1.1`, fixed in `3.1.1` · CVSS 5.5 Medium · Not analysed yet · Published 7 Jan 2023 · Tags: XML external entities (XXE)
- [dssp vulnerable to Improper Restriction of XML External Entity Reference](https://agentprime.io/advisories/GHSA-77cc-w3wm-6whp.md)
  `GHSA-77cc-w3wm-6whp`, `CVE-2016-15011` · Maven `be.e_contract.dssp:dssp-client`: affected `<1.3.2`, fixed in `1.3.2` · CVSS 5.5 Medium · Not analysed yet · Published 6 Jan 2023 · Tags: XML external entities (XXE)
- [bonita-connector-webservice XML External Entity vulnerability](https://agentprime.io/advisories/GHSA-wg99-5vrx-j2gg.md)
  `GHSA-wg99-5vrx-j2gg`, `CVE-2020-36640` · Maven `org.bonitasoft.connectors:bonita-connector-webservice`: affected `<1.3.1`, fixed in `1.3.1` · CVSS 5.5 Medium · Not analysed yet · Published 5 Jan 2023 · Tags: XML external entities (XXE)
- [aXMLRPC XML External Entity vulnerability](https://agentprime.io/advisories/GHSA-g4r8-28fp-f255.md)
  `GHSA-g4r8-28fp-f255`, `CVE-2020-36641` · Maven `fr.turri:aXMLRPC`: affected `<1.12.1`, fixed in `1.12.1` · CVSS 5.5 Medium · Not analysed yet · Published 5 Jan 2023 · Tags: XML external entities (XXE)
- [iText RUPS XML External Entity vulnerability](https://agentprime.io/advisories/GHSA-j69f-fgh5-f7mc.md)
  `GHSA-j69f-fgh5-f7mc`, `CVE-2017-20151` · Maven `com.itextpdf:itext-rups`: affected `<=7.0.1`, no fixed version yet · CVSS 5.5 Medium · Not analysed yet · Published 30 Dec 2022 · Tags: XML external entities (XXE)
- [ONC code-validator-api XML CodeValidatorApiConfiguration.java vocabularyValidationConfigurations xml external entity reference](https://agentprime.io/advisories/CVE-2021-4295.md)
  `CVE-2021-4295` · CVE record: ONC code-validator-api · CVSS 5.5 Medium · Not analysed yet · Published 29 Dec 2022 · Tags: XML external entities (XXE)
- [Talend Open Studio for MDM SystemStorageWrapper.java xml external entity reference](https://agentprime.io/advisories/CVE-2022-4818.md)
  `CVE-2022-4818` · CVE record: Talend Open Studio for MDM · CVSS 5.5 Medium · Not analysed yet · Published 28 Dec 2022 · Tags: XML external entities (XXE)
- [Improper Restriction of XML External Entity Reference in Dragonfly](https://agentprime.io/advisories/CVE-2022-41967.md)
  `CVE-2022-41967` · CVE record: HyperaDev Dragonfly · CVSS 7.0 High · Not analysed yet · Published 27 Dec 2022 · Tags: XML external entities (XXE)
- [3D City Database OGC Web Feature Service xml external entity reference](https://agentprime.io/advisories/CVE-2022-4607.md)
  `CVE-2022-4607` · CVE record: 3D City Database OGC Web Feature Service · CVSS 5.5 Medium · Not analysed yet · Published 18 Dec 2022 · Tags: XML external entities (XXE)
- [XML external entity injection in Symantec Identity Governance and Administration](https://agentprime.io/advisories/CVE-2022-25628.md)
  `CVE-2022-25628` · CVE record: Symantec Identity Governance and Administration · CVSS 8.8 High · Not analysed yet · Published 16 Dec 2022 · Tags: XML external entities (XXE)
- [Jenkins Plot Plugin XML External Entity Reference vulnerability](https://agentprime.io/advisories/GHSA-wgpp-g6v9-7hxp.md)
  `GHSA-wgpp-g6v9-7hxp`, `CVE-2022-46682` · Maven `org.jenkins-ci.plugins:plot`: affected `<2.1.12`, fixed in `2.1.12` · CVSS 7.1 High · Not analysed yet · Published 12 Dec 2022 · Tags: XML external entities (XXE)
- [XML external entity injection in JetBrains IntelliJ IDEA](https://agentprime.io/advisories/CVE-2022-46827.md)
  `CVE-2022-46827` · CVE record: JetBrains IntelliJ IDEA · CVSS 3.9 Low · Not analysed yet · Published 8 Dec 2022 · Tags: XML external entities (XXE)
- [An XML external entity (XXE) injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks.](https://agentprime.io/advisories/CVE-2022-45326.md)
  `CVE-2022-45326` · CVE record · CVSS 4.9 Medium · Not analysed yet · Published 6 Dec 2022 · Tags: XML external entities (XXE)
- [Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Information Disclosure.](https://agentprime.io/advisories/CVE-2022-40771.md)
  `CVE-2022-40771` · CVE record · CVSS 4.9 Medium · Not analysed yet · Published 23 Nov 2022 · Tags: XML external entities (XXE)
- [XXE vulnerability on agents in Jenkins SourceMonitor Plugin](https://agentprime.io/advisories/GHSA-h4wx-78p9-fwxw.md)
  `GHSA-h4wx-78p9-fwxw`, `CVE-2022-45396` · Maven `com.thalesgroup.hudson.plugins:sourcemonitor`: affected `<=0.2`, no fixed version yet · CVSS 5.4 Medium · Not analysed yet · Published 16 Nov 2022 · Tags: XML external entities (XXE)
- [XML External Entity Reference in Jenkins CCCC Plugin](https://agentprime.io/advisories/GHSA-f3gj-hvv4-f57v.md)
  `GHSA-f3gj-hvv4-f57v`, `CVE-2022-45395` · Maven `com.thalesgroup.jenkins-ci.plugins:cccc`: affected `<=0.6`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Nov 2022 · Tags: XML external entities (XXE)
- [XXE vulnerability on agents in Jenkins OSF Builder Suite : : XML Linter Plugin](https://agentprime.io/advisories/GHSA-8847-xvjw-9g43.md)
  `GHSA-8847-xvjw-9g43`, `CVE-2022-45397` · Maven `org.jenkins-ci:update-center2`: affected `<=1.0.2`, no fixed version yet · CVSS 5.4 Medium · Not analysed yet · Published 16 Nov 2022 · Tags: XML external entities (XXE)
- [XXE vulnerability in Jenkins JAPEX Plugin](https://agentprime.io/advisories/GHSA-8538-25v4-25pg.md)
  `GHSA-8538-25v4-25pg`, `CVE-2022-45400` · Maven `org.jvnet.hudson.plugins:japex`: affected `<=1.7`, no fixed version yet · CVSS 7.1 High · Not analysed yet · Published 16 Nov 2022 · Tags: XML external entities (XXE)
- [XML External Entity Reference in Jenkins Violations Plugin](https://agentprime.io/advisories/GHSA-4598-wcg8-x56g.md)
  `GHSA-4598-wcg8-x56g`, `CVE-2022-45386` · Maven `org.jenkins-ci.plugins:violations`: affected `<=0.7.11`, no fixed version yet · CVSS 5.4 Medium · Not analysed yet · Published 16 Nov 2022 · Tags: XML external entities (XXE)
- [XML external entity injection in Sophos Mobile managed on-premises](https://agentprime.io/advisories/CVE-2022-3980.md)
  `CVE-2022-3980` · CVE record: Sophos Sophos Mobile managed on-premises · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Nov 2022 · Tags: XML external entities (XXE)
- [Concrete CMS vulnerable to XML External Entity](https://agentprime.io/advisories/GHSA-q48r-xg9h-78m8.md)
  `GHSA-q48r-xg9h-78m8`, `CVE-2022-43689`, `PKSA-ggmy-dxdz-ghnm` · Packagist `concrete5/concrete5`: affected `<8.5.10 || >=9.0.0, <9.1.2`, fixed in `8.5.10`, `9.1.2` · CVSS 5.3 Medium · Not analysed yet · Published 15 Nov 2022 · Tags: XML external entities (XXE)
- [CBRN-Analysis before 22 allows XXE attacks via am mws XML document, leading to NTLMv2-SSP hash disclosure.](https://agentprime.io/advisories/CVE-2022-45194.md)
  `CVE-2022-45194` · CVE record · CVSS 3.8 Low · Not analysed yet · Published 11 Nov 2022 · Tags: XML external entities (XXE)
- [XML external entity injection in Cisco Firepower Management Center](https://agentprime.io/advisories/CVE-2022-20938.md)
  `CVE-2022-20938` · CVE record: Cisco Cisco Firepower Management Center · CVSS 4.3 Medium · Not analysed yet · Published 10 Nov 2022 · Tags: XML external entities (XXE)
- [XML External Entity Injection through a custom View in Splunk Enterprise](https://agentprime.io/advisories/CVE-2022-43570.md)
  `CVE-2022-43570` · CVE record: Splunk Splunk Enterprise · CVSS 8.8 High · Not analysed yet · Published 4 Nov 2022 · Tags: XML external entities (XXE)
- [Trellix IPS Manager vulnerable to XXE](https://agentprime.io/advisories/CVE-2022-3340.md)
  `CVE-2022-3340` · CVE record: Trellix Trellix IPS Manager · CVSS 5.9 Medium · Not analysed yet · Published 4 Nov 2022 · Tags: XML external entities (XXE)
- [XML external entity injection in Hewlett Packard Enterprise Aruba Mobility Conductor (formerly Mobility Master)…](https://agentprime.io/advisories/CVE-2022-37911.md)
  `CVE-2022-37911` · CVE record: Hewlett Packard Enterprise Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central · CVSS 3.8 Low · Not analysed yet · Published 3 Nov 2022 · Tags: XML external entities (XXE)
- [XML external entity injection in IBM InfoSphere Information Server](https://agentprime.io/advisories/CVE-2022-40747.md)
  `CVE-2022-40747` · CVE record: IBM InfoSphere Information Server · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2022 · Tags: XML external entities (XXE)
- [XML external entity injection in VMware Cloud Foundation (NSX-V)](https://agentprime.io/advisories/CVE-2022-31678.md)
  `CVE-2022-31678` · CVE record: VMware Cloud Foundation (NSX-V) · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2022 · Tags: XML external entities (XXE)
- [Duplicate Advisory: Improper Restriction of XML External Entity Reference in pikepdf](https://agentprime.io/advisories/GHSA-x58j-j539-w8mv.md)
  `GHSA-x58j-j539-w8mv`, `CVE-2021-46849` · PyPI `pikepdf`: affected `>=1.2.0, <2.10.0`, fixed in `2.10.0` · CVSS 9.8 Critical · Withdrawn · Not analysed yet · Published 24 Oct 2022 · Tags: XML external entities (XXE)
- [XXE vulnerability in Jenkins Compuware Topaz for Total Test Plugin](https://agentprime.io/advisories/GHSA-vhwv-8897-jm7q.md)
  `GHSA-vhwv-8897-jm7q`, `CVE-2022-43430` · Maven `com.compuware.jenkins:compuware-topaz-for-total-test`: affected `<2.4.9`, fixed in `2.4.9` · CVSS 7.1 High · Not analysed yet · Published 19 Oct 2022 · Tags: XML external entities (XXE)
- [XXE vulnerability in Jenkins REPO Plugin](https://agentprime.io/advisories/GHSA-2w2m-ccf8-57cq.md)
  `GHSA-2w2m-ccf8-57cq`, `CVE-2022-43415` · Maven `org.jenkins-ci.plugins:repo`: affected `<1.16.0`, fixed in `1.16.0` · CVSS 7.1 High · Not analysed yet · Published 19 Oct 2022 · Tags: XML external entities (XXE)
- [XXE in Trellix ePO server](https://agentprime.io/advisories/CVE-2022-3338.md)
  `CVE-2022-3338` · CVE record: Trellix Trellix ePolicy Orchestrator (ePO) · CVSS 5.4 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: XML external entities (XXE)
- [Adobe ColdFusion Improper Restriction of XML External Entity Reference Arbitrary file system read](https://agentprime.io/advisories/CVE-2022-42341.md)
  `CVE-2022-42341` · CVE record: Adobe ColdFusion · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.36 · Not analysed yet · Published 14 Oct 2022 · Tags: XML external entities (XXE)
- [Adobe ColdFusion Solr Service XML External Entity Processing Arbitrary file system read](https://agentprime.io/advisories/CVE-2022-38419.md)
  `CVE-2022-38419` · CVE record: Adobe ColdFusion · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.54 · Not analysed yet · Published 14 Oct 2022 · Tags: XML external entities (XXE)
- [XML external entity injection in IBM Partner Engagement Manager](https://agentprime.io/advisories/CVE-2022-34348.md)
  `CVE-2022-34348` · CVE record: IBM Partner Engagement Manager · CVSS 7.1 High · Not analysed yet · Published 23 Sept 2022 · Tags: XML external entities (XXE)
- [Apache SOAP's RPCRouterServlet allows reading of arbitrary files over HTTP](https://agentprime.io/advisories/GHSA-jq8c-j47c-vvwm.md)
  `GHSA-jq8c-j47c-vvwm`, `CVE-2022-40705` · Maven `soap:soap`: affected `>=2.2, <=2.3.1`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 23 Sept 2022 · Tags: XML external entities (XXE)
- [Jenkins RQM Plugin vulnerable to Improper Restriction of XML External Entity Reference](https://agentprime.io/advisories/GHSA-j8xr-2279-88qj.md)
  `GHSA-j8xr-2279-88qj`, `CVE-2022-41241` · Maven `net.praqma:rqm-plugin`: affected `<=2.8`, no fixed version yet · CVSS 5.9 Medium · Not analysed yet · Published 22 Sept 2022 · Tags: XML external entities (XXE)
- [Jenkins Compuware Common Configuration Plugin vulnerable to Improper Restriction of XML External Entity Reference](https://agentprime.io/advisories/GHSA-g43x-pcc9-f472.md)
  `GHSA-g43x-pcc9-f472`, `CVE-2022-41226` · Maven `com.compuware.jenkins:compuware-common-configuration`: affected `<1.0.15`, fixed in `1.0.15` · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2022 · Tags: XML external entities (XXE)
- [XML external entity injection in Forcepoint Data Loss Prevention (DLP) and others](https://agentprime.io/advisories/CVE-2022-1700.md)
  `CVE-2022-1700` · CVE record: Forcepoint Data Loss Prevention (DLP) and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 Sept 2022 · Tags: XML external entities (XXE)
- [Apache Calcite before 1.32.0 vulnerable to potential XML External Entity (XXE) attack](https://agentprime.io/advisories/GHSA-fj2m-w3wv-x9pr.md)
  `GHSA-fj2m-w3wv-x9pr`, `CVE-2022-39135` · Maven `org.apache.calcite:calcite-core`: affected `>=1.22.0, <1.32.0`, fixed in `1.32.0` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Sept 2022 · Tags: XML external entities (XXE)
- [MEI2Volpiano is vulnerable to XML External Entity (XXE), leading to a Denial of Service (DoS)](https://agentprime.io/advisories/GHSA-6xm7-3cc5-47f9.md)
  `GHSA-6xm7-3cc5-47f9`, `CVE-2022-37189`, `PYSEC-2026-847` · PyPI `mei2volpiano`: affected `<=0.8.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2022 · Tags: XML external entities (XXE)
- [XML external entity injection in Delta Electronics Delta Robot Automation Studio (DRAS)](https://agentprime.io/advisories/CVE-2022-2759.md)
  `CVE-2022-2759` · CVE record: Delta Electronics Delta Robot Automation Studio (DRAS) · CVSS 5.5 Medium · Not analysed yet · Published 31 Aug 2022 · Tags: XML external entities (XXE)
- [XXE vulnerability in DLP Endpoint for Windows](https://agentprime.io/advisories/CVE-2022-2330.md)
  `CVE-2022-2330` · CVE record: Trellix DLP Endpoint for Windows · CVSS 6.5 Medium · Not analysed yet · Published 30 Aug 2022 · Tags: XML external entities (XXE)
- [XML external entity injection in Red Hat AMQ](https://agentprime.io/advisories/CVE-2020-14379.md)
  `CVE-2020-14379` · CVE record: Red Hat AMQ · No CVSS score · Not analysed yet · Published 16 Aug 2022 · Tags: XML external entities (XXE)
- [XML external entity injection in The Eclipse Foundation Eclipse Sphinx](https://agentprime.io/advisories/CVE-2022-2838.md)
  `CVE-2022-2838` · CVE record: The Eclipse Foundation Eclipse Sphinx · No CVSS score · Not analysed yet · Published 16 Aug 2022 · Tags: XML external entities (XXE)
- [mofh Vulnerable to Improper Restriction of XML External Entity Reference](https://agentprime.io/advisories/GHSA-7r9x-qrpr-3cxw.md)
  `GHSA-7r9x-qrpr-3cxw` · PyPI `mofh`: affected `<1.0.1`, fixed in `1.0.1` · No CVSS score · Not analysed yet · Published 11 Aug 2022 · Tags: XML external entities (XXE)

Newest: <https://agentprime.io/advisories/tag/xxe.md>
Older: <https://agentprime.io/advisories/tag/xxe.md?cursor=WyIyMDIyLTA4LTExVDE4OjA2OjA1LjAwMDAwMFoiLCJHSFNBLTdyOXgtcXJwci0zY3h3Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=xxe&cursor=WyIyMDIzLTAyLTA5VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMy0yNDMyMyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/xxe/?cursor=WyIyMDIzLTAyLTA5VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMy0yNDMyMyJd>. Everything for agents: <https://agentprime.io/llms.txt>.