CVE-2019-3773 · Brief

CVEs like CVE-2019-3773

The records whose text reads closest to CVE-2019-3773, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2014-02250.844
   When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier…

   Same weakness class, CWE-611 (XML external entity reference).

2. CVE-2019-37720.870
   Spring Integration XML External Entity Injection (XXE)

   Same weakness class, CWE-611 (XML external entity reference); same vendor or product family, Spring.

3. CVE-2026-409980.830
   Jaxp13 XPath XXE via StreamSource and SAXSource

   Same weakness class, CWE-611 (XML external entity reference); same vendor or product family, Spring.

4. CVE-2026-409910.769
   XML External Entity (XXE) injection when documenting untrusted XML content

   Same weakness class, CWE-611 (XML external entity reference); same vendor or product family, Spring.

5. CVE-2026-367650.750
   An XML external entity (XXE) vulnerability in the /designer/loadReport endpoint of SpringBlade v4.8.0 allows…

   Same weakness class, CWE-611 (XML external entity reference).

6. CVE-2021-430900.753
   An XML External Entity (XXE) vulnerability exists in soa-model before 1.6.4 in the WSDLParser function.

   Same weakness class, CWE-611 (XML external entity reference).

7. CVE-2013-41520.772
   The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

8. CVE-2014-00540.746
   The Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework before 3.2.8 and 4.0.0 before 4.0.2 does not…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

9. CVE-2018-207330.748
   BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE.

   Same weakness class, CWE-611 (XML external entity reference).

10. CVE-2013-64290.730
    The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not…

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,902 records. Fetched 2026-11-01.