CWE-643 XPath表达式中数据转义处理不恰当(XPath注入) 类弱点 11 条 CVE 漏洞汇总，含 AI 中文分析。
| CVE ID | 标题 | CVSS | 风险等级 | 发布日期 |
|---|---|---|---|---|
| CVE-2026-24343 | Apache HertzBeat 安全漏洞 — Apache HertzBeat | 9.4AI | CriticalAI | 2026-02-10 |
| CVE-2025-11844 | Hugging Face Transformers 安全漏洞 — huggingface/smolagents | 9.1AI | CriticalAI | 2025-10-22 |
| CVE-2025-20218 | Cisco Secure Firewall Management Center 安全漏洞 — Cisco Firepower Management Center | 4.9 | Medium | 2025-08-14 |
| CVE-2022-43840 | IBM Aspera Console 安全漏洞 — Aspera Console | 4.3 | Medium | 2025-04-14 |
| CVE-2024-39565 | Juniper Networks Junos OS 安全漏洞 — Junos OS | 8.8 | High | 2024-07-10 |
| CVE-2024-2648 | Netentsec NS-ASG Application Security Gateway 安全漏洞 — NS-ASG Application Security Gateway | 4.3 | Medium | 2024-03-19 |
| CVE-2024-2645 | Netentsec NS-ASG Application Security Gateway 安全漏洞 — NS-ASG Application Security Gateway | 4.3 | Medium | 2024-03-19 |
| CVE-2023-36429 | Microsoft Dynamics 365 安全漏洞 — Microsoft Dynamics 365 (on-premises) version 9.0 | 6.5 | Medium | 2023-10-10 |
| CVE-2023-36433 | Microsoft Dynamics 365 安全漏洞 — Microsoft Dynamics 365 (on-premises) version 9.0 | 6.5 | Medium | 2023-10-10 |
| CVE-2023-24922 | Microsoft Dynamics 安全漏洞 — Microsoft Dynamics 365 (on-premises) version 9.0 | 6.5 | Medium | 2023-03-14 |
| CVE-2020-25162 | B. Braun Melsungen Ag B. Braun Melsungen AG SpaceCom 安全漏洞 — SpaceCom | 7.5 | High | 2022-04-14 |
CWE-643（XPath表达式中数据转义处理不恰当(XPath注入)） 是常见的弱点类别，本平台收录该类弱点关联的 11 条 CVE 漏洞。