CVE-2018-16166: Jpcert Logontracer

High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days.

LogonTracer 1.2.0 and earlier allows remote attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.

Affected products

• Jpcert Logontracer: up to and including 1.2.0

Published 2019-01-09. Last modified 2026-06-17.