AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2019-12154

CRITICAL · CVSS 9.1 EPSS 2.31%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-06-11 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.1. It may lead to a denial-of-service condition.

CVE
CVE-2019-12154
Severity
CRITICAL
CVSS
9.1
EPSS
2.31%

Original NVD Description

XXE in the XML parser library in RealObjects PDFreactor before 10.1.10722 allows attackers to supply malicious XML content in externally referenced resources, leading to disclosure of local file contents and/or denial of service conditions.

Related CVEs

Other vulnerabilities affecting the same vendor(s)