Medium severity5.5NVD Advisory· Published Nov 6, 2023· Updated Jun 17, 2026

CVE-2023-46802

Description

e-Tax software Version3.0.10 and earlier improperly restricts XML external entity references (XXE) due to the configuration of the embedded XML parser. By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nta/E Tax
cpe:2.3:a:nta:e-tax:*:*:*:*:*:*:*:*
Range: <=3.0.10
E Tax/e-Tax softwarellm-create
Range: <=3.0.10
National Tax Agency/e-Tax Softwarecpe-rescue
Range: Version3.0.10 and earlier

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN14762986/nvdThird Party Advisory
www.e-tax.nta.go.jp/topics/topics_20231102.htmnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000