Iwakawa Kento

**Name of the Vulnerable Software and Affected Versions** Electronic Delivery Check System (Doboku) versions 18.1.0 and earlier Electronic Delivery Check System (Dentsu) versions 12.1.0 and earlier Electronic Delivery Check System (Kikai) versions 10.1.0 and earlier Electronic delivery item Inspection Support System versions 4.0.31 and earlier **Description** The affected systems improperly restrict XML external entity references (XXE). By processing a specially crafted XML file, an attacker may be able to read arbitrary files on the system. **Recommendations** For Electronic Delivery Check System (Doboku) versions 18.1.0 and earlier, consider disabling XML external entity references until a patch is available. For Electronic Delivery Check System (Dentsu) versions 12.1.0 and earlier, consider disabling XML external entity references until a patch is available. For Electronic Delivery Check System (Kikai) versions 10.1.0 and earlier, consider disabling XML external entity references until a patch is available. For Electronic delivery item Inspection Support System versions 4.0.31 and earlier, consider disabling XML external entity references until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Electronic Delivery Check System (Ministry of Agriculture, Forestry and Fisheries The Agriculture and Rural Development Project Version) versions 14.0.001.002 and earlier **Description** The issue is related to the improper restriction of XML external entity references (XXE) in the Electronic Delivery Check System. This allows an attacker to read arbitrary files on the system by processing a specially crafted XML file. **Recommendations** For versions 14.0.001.002 and earlier, consider disabling the XML processing functionality until a patch is available to prevent exploitation of the XXE issue. Restrict access to sensitive files and directories to minimize the risk of arbitrary file reading.