MP
Product
Mpxj
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 1Low 1
Watch
Add Mpxj to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-25020 | 9.8 | Aug 29 | MPXJ through 8.1.3 allows XXE attacks Affected: through 8.1.3 |
| CVE-2020-35460 | 5.3 | Dec 14 | common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writing of files to arbitrary locations Affected: before 8.3.5 |
| CVE-2022-41954 | 3.3 | Nov 25 | MPXJ is an open source library to read and write project plans from a variety of file formats and databases Affected: before 10.14.1 |
Showing 3
