By exploiting a vulnerability in your XML, an attacker is able to view files on the application server file system and interact with a backend or external system that the application itself has access to. This alone can have serious consequences, however, this can be further compounded, with XXE attacks being leveraged by an attacker to perform server-side request forgery (SSRF) attacks to compromise the underlying server. It is therefore important to implement XXE prevention strategies.