Security Microsoft PowerShell XXE Injection December 6, 2016 007admin Leave a comment Microsoft PowerShell suffers from an XML external entity (XXE) injection vulnerability that allows for file exfiltration.