CVE-2026-40998

8.2 Élevée

Publiée le 11/06/2026 à 09:16 · Modifiée le 04/09/2026 à 20:19 · Analysée par le NVD · Source : security@vmware.com

Description

Jaxp13XPathTemplate evaluated XPath expressions for StreamSource and SAXSource inputs using a code path that parsed attacker-controlled XML with the JDK's default DocumentBuilderFactory behavior instead of Spring's hardened parser configuration. Applications that evaluate XPath against untrusted XML payloads could therefore be exposed to XML External Entity (XXE) style attacks. Affected versions: Spring Web Services 5.0.0 through 5.0.1; 4.1.0 through 4.1.3; 4.0.0 through 4.0.18; 3.1.0 through 3.1.8.

Traduire en français

Produits concernés

Spring Web Services
Broadcom spring web services

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.2 Élevée	security@vmware.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N`

Faiblesses (CWE)

CWE-611

Références

https://spring.io/security/cve-2026-40998 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories