{"id":"CVE-2024-40896","url":"https://www.cyber-defence.io/tools/cve/CVE-2024-40896","generatedAt":"2026-10-28T00:52:33.087Z","title":"This makes classic XXE attacks possible.","description":"In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting \"checked\"). This makes classic XXE attacks possible.","published":"2024-12-23T17:15:08.000Z","lastModified":"2026-06-17T07:46:49.000Z","status":"Analyzed","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":9.1,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H"},"cwe":["CWE-611"],"affected":["xmlsoft/libxml2","netapp/hci compute node","netapp/solidfire \\& hci management node","netapp/solidfire \\& hci storage node","netapp/h300s firmware","netapp/h410s firmware","netapp/h500s firmware","netapp/h700s firmware","netapp/h410c firmware"],"epss":{"score":0.01218,"percentile":0.68418,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.22%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/commit/1a8932303969907f6572b1b6aac4081c56adb5c6","tags":["Issue Tracking"],"source":"cve@mitre.org"},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/761","tags":["Issue Tracking"],"source":"cve@mitre.org"},{"url":"https://security.netapp.com/advisory/ntap-20250228-0004/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2024-40896","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}