m
mpxj
Security Risk Profile
38
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 6 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 29, 2020 to present
6
Total CVEs
3
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
6.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
38/100
low
Severity Distribution
Critical
1High
2Medium
2Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XEE
3
2
SQL Injection
2
3
Path Traversal
2
4
Infoleak
1
Most Affected Products
1. Oracle Primavera Unifier12
2. MPXJ MPXJ6
3. pip/mpxj3
4. nuget/net.sf.mpxj-for-vb3
5. nuget/net.sf.mpxj-for-csharp3
Recent Vulnerabilities
See more →CVE-2026-61570
CVSS 7.5high
MPXJ: XXE Vulnerability in MerlinReader
Sep 22, 2026
PYSEC-2026-4107
CVSS 7.5high
MPXJ: XXE Vulnerability in MerlinReader
Sep 22, 2026🔧 No Patch
CVE-2026-65829
CVSS 5.3medium
MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers
Sep 22, 2026
CVE-2022-41954
CVSS 3.3low
Temporary File Information Disclosure Vulnerability
Nov 25, 2022
CVE-2020-35460
CVSS 5.3medium
Dec 14, 2020
CVE-2020-25020
CVSS 9.8critical
Aug 29, 2020
Monitor mpxj in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.