← Database

CVE-2022-25236

CRITICAL CVSS: 9.8 Published: 2022-02-16 Modified: 2026-06-17

Description

xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.

Affected Platforms

Oracle Http ServerSiemens Sinema Remote Connect ServerDebian Debian LinuxOracle Zfs Storage Appliance KitLibexpat Project Libexpat

Weakness Type

CWE-668, CWE-668

References