Best I can tell you are using a very old version of Axis2 and Axiom but anyways that looks like noise from an automated scanning tool because an XXE is DTD related and web services standards like SOAP prohibit DTD's.
That Axiom code hasn't changed in about a decade so it doesn't seem to be a real issue. On Thu, Mar 7, 2024 at 10:51 PM Vignesh Ragavan <vigneshr.raga...@gmail.com> wrote: > Hi, > > The xmlstreamreaderwrapper in the axis kernel library that I'm using > displays a XXE issue. How to resolve that ? > > Attached file for your reference. > > Thanks, > Vignesh >