Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2015-0254

jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags

Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) <x:parse> or (2) <x:transform> JSTL XML tag.

CVSS 3.0 · 7.6 High EPSS 12.0% KEV · Not listed
Vendors
Apache Canonical Redhat
Products
Standard Taglibs Ubuntu Linux Enterprise Linux and 2 more