CWE-112 - Missing XML Validation

Description

The software accepts XML from an untrusted source but does not validate the XML against the proper schema.






Latest vulnerabilities for CWE-112

Missing XML validation in SAP PowerDesigner client 2023-10-12
Medium Yes
Missing XML Validation in Cisco Web Security Appliance 2021-07-08
Medium Yes
Multiple vulnerabilities in Hamilton-T1 2021-02-17
Low No

References

Description of CWE-112 on Mitre website