CVE-2019-17637 - AskarLabs CVE Database

CVE-2019-17637

Vendor The Eclipse Foundation

Product Eclipse Web Tools Platform

Weakness CWE-611 · XXE

Published July 15, 2020

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files referring to external entities could be exploited to send the contents of local files to a remote server when edited or validated, even when external entity resolution is disabled in the user preferences.

Key dates

02Disclosure timeline

July 15, 2020 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-17637 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/611.html

Related vulnerabilities

04Related CVE

CVE-2025-57704 EIP Builder XML External Entity Processing Information Disclosure Vulnerability CVE-2021-34706 Cisco Identity Services Engine XML External Entity Injection Vulnerability CVE-2025-64518 CycloneDX Core (Java): BOM validation is vulnerable to XML External Entity injection CVE-2022-4818 Talend Open Studio for MDM SystemStorageWrapper.java xml external entity reference CVE-2025-29932