CVE-2019-19032: XMLBlueprint through 16.191112 is affected by XML External Entity Injection.

Security readout for executives and security teams

CVE-2019-19032 is a reported XML External Entity issue in XMLBlueprint through 16.191112. If a malicious XML file is validated, the tool may read local files accessible to the user running it. This is most urgent where XMLBlueprint handles untrusted or partner-supplied XML on workstations or servers with sensitive files. Exposure is likely limited to environments running XMLBlueprint through 16.191112 and validating XML files from untrusted, external, or low-trust sources. Risk increases if the process has access to secrets, local documents, mounted shares, or configuration files. Prioritize if XMLBlueprint is used in business workflows that process external XML or run near sensitive files. Otherwise, handle through normal vulnerability management after confirming installation and usage. Mitigation focus: Check XMLBlueprint vendor guidance for fixed versions or configuration mitigations.; Avoid validating untrusted XML with affected versions until remediated.; Run XML validation with least-privilege file access..

Prepared

Jun 6, 2026, 03:31 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.