XML External Entity (xee) Attack

Vulnerability

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 24, 2025

Last Seen

December 2, 2025

API

XML External Entity (XEE) Attack is a vulnerability where an XML parser processes external entity declarations, enabling attackers to access local files, perform server-side requests, or cause other unintended actions.

Overview

Recent Events

Related Clusters (2)

Multiple OpenJDK Vulnerabilities Discovered in Ubuntu 25.10 and Derivatives

Dec 2·11 sources

OpenJDK 21 and 25 Vulnerabilities Expose Sensitive Data Risks

Nov 24·11 sources

Related Entities

Data Breach Zero-day Exploit Ubuntu CRaC JDK 17 OpenJDK OpenJDK 21 Openjdk-21-crac Openjdk-21-crac-jdk Openjdk-21-crac-jdk-headless Openjdk-21-crac-jre Openjdk-21-crac-jre-headless Openjdk-21-crac-jre-zero

XML External Entity (xee) Attack

Overview

Recent Events

Profile

Affected Platforms

Related Clusters (2)

Multiple OpenJDK Vulnerabilities Discovered in Ubuntu 25.10 and Derivatives

OpenJDK 21 and 25 Vulnerabilities Expose Sensitive Data Risks

Related Articles (10)

Ubuntu 25.10 OpenJDK Critical Security Risks USN-7900-1 CVE-2025

Ubuntu 25.10: CRaC JDK 25 Important XML External Entity Advisory 2025

Ubuntu 25.10: Crucial Security Fix for OpenJDK 21 USN-7901-1 CVE-2025

USN-7902-1: CRaC JDK 25 vulnerabilities

USN-7901-1: CRaC JDK 21 vulnerabilities

USN-7900-1: CRaC JDK 17 vulnerabilities

Ubuntu 25.10: OpenJDK 8 Critical XML External Entity Attack USN-7881

Ubuntu 25.10: OpenJDK 17 Critical Security Flaws USN-7883

USN-7885-1: OpenJDK 21 vulnerabilities

USN-7884-1: OpenJDK 25 vulnerabilities

Related Entities