V
Vexday
by TrueHacking
›
PT
ES
EN
Intelligence
▾
Intelligence
Exploit Timeline
risk queue
Threats
ransomware · malware
Overview
observatory
Explore
▾
Explore
CVEs
Technologies
Vendors
Weakness types
Briefing
Live
Home
/
Technologies
/
XML-Security
Vulnerabilities in
XML-Security
2 results
CVE-2025-48995
MEDIUM
SignXML's signature verification with HMAC is vulnerable to a timing attack
EPSS
0.2%
CVE-2025-48994
MEDIUM
SignXML's signature verification with HMAC is vulnerable to an algorithm confusion attack
EPSS
0.2%