Common Weakness Enumeration

CWE-112 Missing XML Validation

Description

The product accepts XML from an untrusted source but does not validate the XML against the proper schema.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-112 ordered by modification date.

6 reviewed records

Advisory ID	NVD ID	Severity	PURLs	Summary	Last Modified
GHSA-63v5-26vq-m4vm	CVE-2026-1190	LOW	maven/org.keycloak/keycloak-services	Keycloak's missing timestamp validation allows attackers to extend SAML response validity periods	2026-03-06
GHSA-qcfc-hmrc-59x7	CVE-2025-68493	HIGH	maven/com.opensymphony/xwork maven/org.apache.struts.xwork/xwork-core maven/org.apache.struts/struts2-core	Apache Struts 2 is Missing XML Validation	2026-01-16
GHSA-prc3-7f44-w48j	CVE-2014-0119	MODERATE	maven/org.apache.tomcat/tomcat maven/org.apache.tomcat/tomcat-catalina maven/org.apache.tomcat/tomcat-jasper	Missing XML Validation in Apache Tomcat	2025-04-14
GHSA-7j4h-8wpf-rqfh	CVE-2013-4002	HIGH	maven/xerces/xercesImpl	Missing XML Validation in Apache Xerces2	2024-03-05
GHSA-vp63-rrcm-9mph	CVE-2013-7315	MODERATE	maven/org.springframework/spring-oxm	Missing XML Validation in Spring Framework	2024-02-27
GHSA-254q-rp36-v2m8	CVE-2013-2160	MODERATE	maven/org.apache.cxf/cxf-rt-frontend-jaxrs	Missing XML Validation in Apache CXF	2022-07-08