CVE-2017-8316
IntelliJ IDEA Ultimate Edition: IntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can exploit…
CVE-2017-8316 is fixed in IntelliJ IDEA (EAP) on 1 platform by IntelliJ IDEA (EAP) 262.5752.32 (version 262.5752.32), released May 14, 2026. 1 other affected product has no fix yet. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
7.5
No vendor severity
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0226
83rd percentile
IntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can exploit the vulnerability by implementing malicious code on both Androidmanifest.xml.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Windows apps | |||
| IntelliJ IDEA (EAP) | 262.5752.32 | IntelliJ IDEA (EAP) 262.5752.32 | May 14, 2026 |
| No fix yet | |||
| IntelliJ IDEA Ultimate Edition (EAP) (Windows apps) | No fix yet | no-fix | n/a |