This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. ... Being vulnerable to XXE attacks likely means that the application is vulnerable to denial of service attacks including the Billion Laughs attack.