Skip to content

Vendor

org.apache.sis.core vulnerabilities

1 published CVE affecting org.apache.sis.core, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of org.apache.sis.core alerts

Products

Latest org.apache.sis.core CVEs

Newest publication first

  1. CVE-2025-68280 Apache SIS: XML External Entity (XXE) vulnerability

    Published
    MediumCVSS 6.5 EPSS 0.70%

    Improper Restriction of XML External Entity Reference vulnerability in Apache SIS. It is possible to write XML files in such a way that, when parsed by Apache SIS, an XML file reveals to the attacker the content of a local file on the server running Apache SIS. This vulnerability...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.