XML External Entity Processing in jOpenDocument

Publication date: 2026-05-04

Last updated on: 2026-05-04

Assigner: TCS-CERT

Description

Improper restriction of XML external entity reference vulnerability in ILM Informatique jOpenDocument allows Data Serialization External Entities Blowup. This issue affects jOpenDocument: 1.5.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-04

Last Modified

2026-05-04

Generated

2026-07-06

AI Q&A

2026-05-05

EPSS Evaluated

2026-07-05

NVD

CVE-2026-6501

Affected Vendors & Products

Vendor	Product	Version / Range
ilm_informatique	jopendocument	1.5

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-611	The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

Attack-Flow Graph

Executive Summary

This vulnerability is an improper restriction of XML external entity (XXE) references in the ILM Informatique jOpenDocument software, specifically version 1.5. It allows an attacker to exploit the way the software processes XML data, potentially causing a Data Serialization External Entities Blowup.

Impact Analysis

The vulnerability can lead to exploitation through XML external entity processing, which may result in denial of service or resource exhaustion due to the external entities blowup. This can affect the availability and reliability of the affected software.

Hi! I’m here to help you understand CVE-2026-6501. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70