# xxe


- [CVE-2024-34102](https://insights.sbomify.com/CVE-2024-34102/): Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) (critical 9.8, exploited in the wild)
- [CVE-2022-47966](https://insights.sbomify.com/CVE-2022-47966/): Zoho ManageEngine Multiple Products Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2019-9670](https://insights.sbomify.com/CVE-2019-9670/): Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference (critical 9.8, exploited in the wild)
- [CVE-2025-2775](https://insights.sbomify.com/CVE-2025-2775/): SysAid On-Prem Improper Restriction of XML External Entity Reference (critical 9.3, exploited in the wild)
- [CVE-2025-2776](https://insights.sbomify.com/CVE-2025-2776/): SysAid On-Prem Improper Restriction of XML External Entity Reference (critical 9.3, exploited in the wild)
- [CVE-2025-58360](https://insights.sbomify.com/CVE-2025-58360/): OSGeo GeoServer Improper Restriction of XML External Entity Reference (high 8.2, exploited in the wild)
- [CVE-2020-1147](https://insights.sbomify.com/CVE-2020-1147/): Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2023-45727](https://insights.sbomify.com/CVE-2023-45727/): North Grid Proself Improper Restriction of XML External Entity (XXE) Reference (high 7.5, exploited in the wild)
- [CVE-2019-13608](https://insights.sbomify.com/CVE-2019-13608/): Citrix StoreFront Server XML External Entity (XXE) Processing (high 7.5, exploited in the wild)
- [CVE-2016-9563](https://insights.sbomify.com/CVE-2016-9563/): SAP NetWeaver XML External Entity (XXE) (medium 6.5, exploited in the wild)
- [CVE-2009-3960](https://insights.sbomify.com/CVE-2009-3960/): Adobe BlazeDS Information Disclosure (medium 6.5, exploited in the wild)
- [CVE-2022-22486](https://insights.sbomify.com/CVE-2022-22486/): IBM Tivoli Workload Scheduler XML external entity injection (critical 10.0)

---
From sbomify Insights: https://insights.sbomify.com/types/xxe/