CVE-2018-1000823: Exist-DB Exist

Critical severity, CVSS 10.0. EPSS: 1.9% chance of exploitation in the next 30 days.

exist version <= 5.0.0-RC4 contains a XML External Entity (XXE) vulnerability in XML Parser for REST Server that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.

Affected products

• Exist-DB Exist: before 5.0.0 (fixed in 5.0.0); version 5.0.0 only

Published 2018-12-20. Last modified 2026-06-17.