Vulnerabilities (CVE)

Filtered by vendor Nablarch Project Subscribe
Filtered by product Nablarch
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-5919 1 Nablarch Project 1 Nablarch 2023-12-10 6.4 MEDIUM 9.1 CRITICAL
An incomplete cryptography of the data store function by using hidden tag in Nablarch 5 (5, and 5u1 to 5u13) allows remote attackers to obtain information of the stored data, to register invalid value, or alter the value via unspecified vectors.
CVE-2019-5918 1 Nablarch Project 1 Nablarch 2023-12-10 8.5 HIGH 9.1 CRITICAL
Nablarch 5 (5, and 5u1 to 5u13) allows remote attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.