Independentsoft vulnerabilities
We track 3 vulnerabilities in Independentsoft products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 24, 2023.
3vulnerabilities
3critical
0high
0exploited
9.8average CVSS score
Latest Independentsoft vulnerabilities
- 9.8 Critical severity
Jodf: Improper Restriction of XML External Entity Reference
An issue was discovered in Independentsoft JODF before 1.1.110. The API is prone to XML external entity (XXE) injection via a remote DTD in a DOCX file.
- 9.8 Critical severity
Jspreadsheet: Improper Restriction of XML External Entity Reference
An issue was discovered in Independentsoft JSpreadsheet before 1.1.110. The API is prone to XML external entity (XXE) injection via a remote DTD in a DOCX file.
- 9.8 Critical severity
Jword: Improper Restriction of XML External Entity Reference
An issue was discovered in Independentsoft JWord before 1.1.110. The API is prone to XML external entity (XXE) injection via a remote DTD in a DOCX file.