CVE-2019-5918 - Nablarch 5 (5, and 5u1 to 5u13) allows remote attackers to conduct XML External Entity (XXE) attacks via unspecified vectors

Back Back to CVE browser

CRITICAL

Nablarch 5 (5, and 5u1 to 5u13) allows remote attackers to conduct XML External Entity (XXE) attacks via unspecified vectors

Published Mar 12, 2019

9.1

CRITICAL

CVSS 3.0

EPSS 1.86%

Description

Nablarch 5 (5, and 5u1 to 5u13) allows remote attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.

Affected products

Vendor TIS Inc. Product Nablarch 5 Default
n/a
- Version
  Nablarch 5, and 5u1 to 5u13
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

TIS Inc.

Nablarch 5

n/a

Version	Status	Constraints
Nablarch 5, and 5u1 to 5u13	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-611

XXE

References (2)

http://jvn.jp/en/jp/JVN56542712/index.html
third-party-advisoryx_refsource_JVNThird Party Advisory
https://nablarch.atlassian.net/projects/NAB/issues/NAB-295
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
http://jvn.jp/en/jp/JVN56542712/index.html		third-party-advisoryx_refsource_JVNThird Party Advisory
https://nablarch.atlassian.net/projects/NAB/issues/NAB-295		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner jpcert

Published Mar 12, 2019

Updated Aug 4, 2024

Reserved Jan 10, 2019

Link CVE-2019-5918

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-5918

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-5918