CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.8. It may be remotely exploitable.
CVE
CVE-2017-9096
Severity
HIGH
CVSS
8.8
EPSS
9.95%
Original NVD Description
The XML parsers in iText before 5.5.12 and 7.x before 7.0.3 do not disable external entities, which might allow remote attackers to conduct XML external entity (XXE) attacks via a crafted PDF.
Related CVEs
Other vulnerabilities affecting the same vendor(s)