CVE-2019-10244 - AskarLabs CVE Database

CVE-2019-10244

Vendor The Eclipse Foundation

Product Eclipse Kura

Weakness CWE-611 · XXE

Published April 9, 2019

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In Eclipse Kura versions up to 4.0.0, the Web UI package and component services, the Artemis simple Mqtt component and the emulator position service (not part of the device distribution) could potentially be target of XXE attack due to an improper factory and parser initialisation.

Key dates

02Disclosure timeline

April 9, 2019 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-10244 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/611.html

Related vulnerabilities

04Related CVE

CVE-2025-52888 Allure 2's xunit-xml-plugin Vulnerable to Improper XXE Restriction CVE-2025-2777 SysAid On-Prem <= 23.3.40 lshw Proceessing XML External Entity Injection CVE-2018-25082 zwczou WeChat SDK Python to_xml xml external entity reference CVE-2025-14543 Improper Restriction of XML External Entity Reference vulnerability in Connext Professional (Core Libraries) allows Serialized Data External Linking. CVE-2017-20151 iText RUPS XfaFile.java xml external entity reference