Realobjects Pdfreactor — known CVE vulnerabilities

Every CVE whose affected-product data names Realobjects Pdfreactor, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2019-12153 — CVSS 10.0 (critical): Lack of validation in the HTML parser in RealObjects PDFreactor before 10.1.10722 leads to SSRF, allowing attackers to access network or…
• CVE-2019-12154 — CVSS 9.1 (critical): XXE in the XML parser library in RealObjects PDFreactor before 10.1.10722 allows attackers to supply malicious XML content in externally…