CVE-2009-5135

Published: May 2, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Java XML parser in Echo before 2.1.1 and 3.x before 3.0.b6 allows remote attackers to read arbitrary files via a request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Affected (45)

Products: Nextapp: Echo

Nextapp

1 product

Echo

Configuration A

40 vulnerable

Vulnerable Software	Affected Versions
Nextapp Echo	Up to 2.1.0
Nextapp Echo	Version 2.0.1 test1
Nextapp Echo	Version 2.0.1 test2
Nextapp Echo	Version 2.0.1 test3
Nextapp Echo	Version 2.0 alpha10
Nextapp Echo	Version 2.0 alpha11
Nextapp Echo	Version 2.0 alpha12
Nextapp Echo	Version 2.0 alpha13
Nextapp Echo	Version 2.0 alpha14
Nextapp Echo	Version 2.0 alpha15
Nextapp Echo	Version 2.0 alpha16
Nextapp Echo	Version 2.0 alpha1
Nextapp Echo	Version 2.0 alpha2
Nextapp Echo	Version 2.0 alpha3
Nextapp Echo	Version 2.0 alpha4
Nextapp Echo	Version 2.0 alpha5
Nextapp Echo	Version 2.0 alpha6
Nextapp Echo	Version 2.0 alpha7
Nextapp Echo	Version 2.0 alpha8
Nextapp Echo	Version 2.0 alpha9
Nextapp Echo	Version 2.0 beta1
Nextapp Echo	Version 2.0 beta2
Nextapp Echo	Version 2.0 beta3
Nextapp Echo	Version 2.0 beta4
Nextapp Echo	Version 2.0 rc1
Nextapp Echo	Version 2.0 rc2
Nextapp Echo	Version 2.0 rc3
Nextapp Echo	Version 2.0 rc4
Nextapp Echo	Version 2.0 rc5
Nextapp Echo	Version 2.0 rc6
Nextapp Echo	Version 2.0 rc7
Nextapp Echo	Version 2.1.0 beta1
Nextapp Echo	Version 2.1.0 beta2
Nextapp Echo	Version 2.1.0 beta3
Nextapp Echo	Version 2.1.0 beta4
Nextapp Echo	Version 2.1.0 beta5
Nextapp Echo	Version 2.1.0 rc1
Nextapp Echo	Version 2.1.0 rc2
Nextapp Echo	Version 2.1.0 rc3
Nextapp Echo	Version 2.1.0 rc4