← Back

CVE-2026-40998

nvd nist
Published: Jun 11, 2026Modified: Sep 4, 2026

JSON object

Loading...
8.2
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Exploitability: 3.9 / Impact: 4.2
Source: security@vmware.com (Secondary)

Description

Jaxp13XPathTemplate evaluated XPath expressions for StreamSource and SAXSource inputs using a code path that parsed attacker-controlled XML with the JDK's default DocumentBuilderFactory behavior instead of Spring's hardened parser configuration. Applications that evaluate XPath against untrusted XML payloads could therefore be exposed to XML External Entity (XXE) style attacks. Affected versions: Spring Web Services 5.0.0 through 5.0.1; 4.1.0 through 4.1.3; 4.0.0 through 4.0.18; 3.1.0 through 3.1.8.

Affected (4)

Broadcom
1 product
Spring Web Services
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Broadcom
Spring Web Services
Before 3.1.9
Spring Web Services
From 4.0.0 to 4.0.19
Spring Web Services
From 4.1.0 to 4.1.3.1
Spring Web Services
From 5.0.0 to 5.0.1.1

Related CWEs

CWE-611
Improper Restriction of XML External Entity Reference
The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

References (1)

Source: security@vmware.com
Vendor Advisory

Timeline

No history available yet.