CVE-2008-0628: The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the "external general…

PriorityP336high7.8CVSS 2.0

AVNACMAuNCNIPAC

EPSS

3.43%

87.6th percentile

The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the "external general entities" property is false, which allows remote attackers to conduct XML external entity (XXE) attacks and cause a denial of service or access restricted resources.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sun	jdk	—	—
sun	jre	<= 1.6.0	—

CVSS provenance

nvdv2.07.8HIGHAV:N/AC:M/Au:N/C:N/I:P/A:C

vendor_redhat7.8HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.