Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 69

Export CSV
CVE-2015-0250

batik: XML External Entity (XXE) injection in SVG parsing

XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.

CVSS 2.0 · 6.4 Medium EPSS 16.6% KEV · Not listed
Vendors
Apache Canonical Redhat
Products
Batik Ubuntu Linux Jboss Bpms and 2 more
CVE-2015-0263

Camel: XXE in via SAXSource expansion

XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource.

CVSS 2.0 · 5.0 Medium EPSS 7.5% KEV · Not listed
Vendors
Apache Redhat
Products
Camel Jboss Amq Jboss Bpms and 3 more
CVE-2015-0264

Camel: XXE via XPath expression evaluation

Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers to read arbitrary files via an external entity in an invalid XML (1) String or (2) GenericFile object in an XPath query.

CVSS 2.0 · 5.0 Medium EPSS 7.1% KEV · Not listed
Vendors
Apache Redhat
Products
Camel Jboss Amq Jboss Bpms and 3 more
CVE-2015-3192

Framework: denial-of-service attack with XML input

Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service (memory consumption and out-of-memory errors) via a crafted XML file.

CVSS 3.0 · 5.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Fedoraproject Pivotal Software Redhat and 1 more
Products
Fedora Spring Framework Jboss Amq and 5 more
CVE-2016-2510

bsh2: remote code execution via deserialization

BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Handler.

CVSS 3.1 · 8.1 High EPSS 70.4% KEV · Not listed
Vendors
Beanshell Canonical Debian and 1 more
Products
Beanshell Ubuntu Linux Debian Linux and 5 more
CVE-2014-0193

netty: DoS via memory exhaustion during data aggregation

WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service (memory consumption) via a TextWebSocketFrame followed by a long stream of ContinuationWebSocketFrames.

CVSS 2.0 · 5.0 Medium EPSS 4.3% KEV · Not listed
Vendors
Netty Redhat
Products
Netty Jboss Amq Jboss Bpms and 7 more
CVE-2014-0363

smack: incorrect X.509 certificate validation

The ServerTrustManager component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify basicConstraints and nameConstraints in X.509 certificate chains from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate chain.

CVSS 2.0 · 5.8 Medium EPSS 1.2% KEV · Not listed
Vendors
Igniterealtime Redhat
Products
Smack Jboss Bpms Jboss Brms and 1 more
CVE-2014-0364

smack: IQ response spoofing

The ParseRoster component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify the from attribute of a roster-query IQ stanza, which allows remote attackers to spoof IQ responses via a crafted attribute.

CVSS 2.0 · 5.0 Medium EPSS 6.2% KEV · Not listed
Vendors
Igniterealtime Redhat
Products
Smack Jboss Bpms Jboss Brms and 1 more
CVE-2014-3472

Security: Invalid EJB caller role check implementation

The isCallerInRole function in SimpleSecurityManager in JBoss Application Server (AS) 7, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.3.0, does not properly check caller roles, which allows remote authenticated users to bypass access restrictions via unspecified vectors.

CVSS 2.0 · 4.9 Medium EPSS 1.7% KEV · Not listed
Vendors
Redhat
Products
Jboss Bpms Jboss Brms Jboss Enterprise Application Platform and 2 more
CVE-2014-3490

RESTEasy: XXE via parameter entities

RESTEasy 2.3.1 before 2.3.8.SP2 and 3.x before 3.0.9, as used in Red Hat JBoss Enterprise Application Platform (EAP) 6.3.0, does not disable external entities when the resteasy.document.expand.entity.references parameter is set to false, which allows remote attackers to read arbitrary files and have other unspecified impact via unspecified vectors, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0818.

CVSS 2.0 · 7.5 High EPSS 4.6% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Jboss Bpms Jboss Brms and 8 more
CVE-2014-3529

apache-poi: XML eXternal Entity (XXE) flaw

The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

CVSS 2.0 · 4.3 Medium EPSS 12.8% KEV · Not listed
Vendors
Apache Redhat
Products
Poi Jboss Bpms Jboss Brms and 3 more
CVE-2014-3530

PicketLink: XXE via insecure DocumentBuilderFactory usage

The org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method in PicketLink, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 5.2.0 and 6.2.4, expands entity references, which allows remote attackers to read arbitrary code and possibly have other unspecified impact via unspecified vectors, related to an XML External Entity (XXE) issue.

CVSS 2.0 · 7.5 High EPSS 3.9% KEV · Not listed
Vendors
Redhat
Products
Jboss Bpms Jboss Brms Jboss Data Grid and 7 more
CVE-2014-3558

Validator: JSM bypass via ReflectionHelper

ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.

CVSS 2.0 · 5.0 Medium EPSS 2.9% KEV · Not listed
Vendors
Redhat
Products
Hibernate Validator Jboss Bpms Jboss Brms and 3 more
CVE-2014-3574

apache-poi: entity expansion (billion laughs) flaw

Apache POI before 3.10.1 and 3.11.x before 3.11-beta2 allows remote attackers to cause a denial of service (CPU consumption and crash) via a crafted OOXML file, aka an XML Entity Expansion (XEE) attack.

CVSS 2.0 · 4.3 Medium EPSS 7.1% KEV · Not listed
Vendors
Apache Redhat
Products
Poi Jboss Bpms Jboss Brms and 3 more
CVE-2014-3577

CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix

org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "CN=" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the "foo,CN=www.apache.org" string in the O field.

CVSS 3.0 · 4.8 Medium EPSS 9.2% KEV · Not listed
Vendors
Apache Redhat
Products
Httpasyncclient Httpclient Enterprise Linux and 15 more
CVE-2014-3623

CXF: Improper security semantics enforcement of SAML SubjectConfirmation methods

Apache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before 2.7.13 and 3.0.x before 3.0.2, when using TransportBinding, does not properly enforce the SAML SubjectConfirmation method security semantics, which allows remote attackers to conduct spoofing attacks via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 9.2% KEV · Not listed
Vendors
Apache Redhat
Products
Cxf Wss4j Jboss Amq and 5 more
CVE-2013-4002

OpenJDK: XML parsing Denial of Service (JAXP, 8017298)

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, Java SE Embedded 7u40 and earlier, and possibly other products allows remote attackers to cause a denial of service via vectors related to XML attribute names.

CVSS 2.0 · 7.1 High EPSS 24.7% KEV · Not listed
Vendors
Apache Canonical Hp and 7 more
Products
Xerces2 Java Ubuntu Linux Hp-ux and 28 more
CVE-2013-2133

WS: EJB3 role restrictions are not applied to jaxws handlers

The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise Application Platform (EAP) before 6.2.0, does not properly enforce the method level restrictions for JAX-WS Service endpoints, which allows remote authenticated users to access otherwise restricted JAX-WS handlers by leveraging permissions to the EJB class.

CVSS 2.0 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Jboss Bpms Jboss Brms and 2 more
CVE-2013-6440

Java: XML eXternal Entity (XXE) flaw in ParserPool and Decrypter

The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to true, which allows remote attackers to conduct XML external entity (XXE) attacks via a crafted XML DOCTYPE declaration.

CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed
Vendors
Internet2 Redhat Shibboleth
Products
Opensaml Fuse Esb Enterprise Fuse Management Console and 7 more