CVE-2008-0628

no score yetEPSS 3.4%

The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the "external general entities" property is false, which allows remote attackers to conduct XML external entity (XXE) attacks and cause a denial of service or access restricted resources.

EPSS: 3.4% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2008-02-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

sun:jdk
sun:jre

References

http://dev2dev.bea.com/pub/advisory/277
http://scary.beasts.org/security/CESA-2007-002.html
http://secunia.com/advisories/28746
http://secunia.com/advisories/29841
http://secunia.com/advisories/29858

Check your stack JSON