Login Request a demo
MX
Product
Mxgraph
by Jgraph · last CVE Oct 11, 2022
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 1High 0Medium 2Low 0
Severity
All severities3Critical1High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Mxgraph to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-18197
9.8
3%
Feb 24
In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert() is missing flags to prevent XML External Entity (XXE) attacks, as demonstrated…
Affected: through 3.7.5
CVE-2022-40440
6.1
1%
Oct 11
mxGraph v4.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the setTooltips() function
Affected: 4.2.2
CVE-2019-13127
6.1
2%
Jul 1
An issue was discovered in mxGraph through 4.0.0, related to the "draw.io Diagrams" plugin before 8.3.14 for Confluence and other products
Affected: through 4.0.0
Showing 3