Weakness / #36
CWE-611: XML external entity (XXE) in CISA KEV
Improper Restriction of XML External Entity Reference
Answer 8 KEV entries list CWE-611 (XML external entity (XXE)) as of catalog 2026.09.23, 0.5% of the catalog and rank 36 of 185 weaknesses. The most affected vendor is SysAid (2).
- KEV entries
- 80.5% of catalog
- Vendors
- 7affected
- Ransomware: known
- 112.5%
- First added
- 2021-11-03
- Latest added
- 2025-12-11
VVendors
TAdditions by year
| Year | Added |
|---|---|
| 2021 | 2 |
| 2022 | 1 |
| 2023 | 0 |
| 2024 | 2 |
| 2025 | 3 |
| 2026 | 0 |
PProducts
| Product | Entries | Share |
|---|---|---|
| SysAid SysAid On-Prem | 2 | 25% |
| OSGeo GeoServer | 1 | 12.5% |
| North Grid Proself | 1 | 12.5% |
| Adobe Commerce and Magento Open Source | 1 | 12.5% |
| Synacor Zimbra Collaboration Suite (ZCS) | 1 | 12.5% |
| Citrix StoreFront Server | 1 | 12.5% |
| SAP NetWeaver | 1 | 12.5% |
EAll entries
| CVE | Vendor | Product | Added | Ransomware |
|---|---|---|---|---|
| CVE-2025-58360 | OSGeo | GeoServer | Unknown | |
| CVE-2025-2776 | SysAid | SysAid On-Prem | Unknown | |
| CVE-2025-2775 | SysAid | SysAid On-Prem | Unknown | |
| CVE-2023-45727 | North Grid | Proself | Unknown | |
| CVE-2024-34102 | Adobe | Commerce and Magento Open Source | Unknown | |
| CVE-2019-9670 | Synacor | Zimbra Collaboration Suite (ZCS) | Unknown | |
| CVE-2019-13608 | Citrix | StoreFront Server | Known | |
| CVE-2016-9563 | SAP | NetWeaver | Unknown |
Cite this
8 CISA KEV entries list CWE-611 (XML external entity (XXE)), 0.5% of the catalog. Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/cwe/cwe-611/
Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23.