CVE-2021-43090: PREDIC8 Soa Model

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

An XML External Entity (XXE) vulnerability exists in soa-model before 1.6.4 in the WSDLParser function.

Affected products

• PREDIC8 Soa Model: before 1.6.4 (fixed in 1.6.4)

Published 2022-03-25. Last modified 2026-06-17.