AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2019-17637

HIGH · CVSS 7.1 EPSS 0.88% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-07-15 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2019-17637
Severity
HIGH
CVSS
7.1
EPSS
0.88%

Original NVD Description

In all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files referring to external entities could be exploited to send the contents of local files to a remote server when edited or validated, even when external entity resolution is disabled in the user preferences.