Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-idm-pki-acmealma-upgrade-idm-pki-basealma-upgrade-idm-pki-base-javaalma-upgrade-idm-pki-caalma-upgrade-idm-pki-kraalma-upgrade-idm-pki-serveralma-upgrade-idm-pki-symkeyalma-upgrade-idm-pki-toolsalma-upgrade-ldapjdk-javadocalma-upgrade-pki-acmealma-upgrade-pki-basealma-upgrade-pki-base-javaalma-upgrade-pki-caalma-upgrade-pki-kraalma-upgrade-pki-serveralma-upgrade-pki-symkeyalma-upgrade-pki-toolsalma-upgrade-python3-idm-pkialma-upgrade-python3-pki | Nov 4, 2022 | Jul 29, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-pki-baseamazon-linux-ami-2-upgrade-pki-base-javaamazon-linux-ami-2-upgrade-pki-caamazon-linux-ami-2-upgrade-pki-core-debuginfoamazon-linux-ami-2-upgrade-pki-javadocamazon-linux-ami-2-upgrade-pki-kraamazon-linux-ami-2-upgrade-pki-serveramazon-linux-ami-2-upgrade-pki-symkeyamazon-linux-ami-2-upgrade-pki-tools | Apr 21, 2023 | Jul 29, 2022 | |
| Centos_linux | — | centos-upgrade-apache-commons-collectionscentos-upgrade-apache-commons-langcentos-upgrade-apache-commons-netcentos-upgrade-bea-stax-apicentos-upgrade-glassfish-fastinfosetcentos-upgrade-glassfish-jaxb-apicentos-upgrade-glassfish-jaxb-corecentos-upgrade-glassfish-jaxb-runtimecentos-upgrade-glassfish-jaxb-txw2centos-upgrade-idm-pki-acmecentos-upgrade-idm-pki-basecentos-upgrade-idm-pki-base-javacentos-upgrade-idm-pki-cacentos-upgrade-idm-pki-kracentos-upgrade-idm-pki-servercentos-upgrade-idm-pki-symkeycentos-upgrade-idm-pki-symkey-debuginfocentos-upgrade-idm-pki-toolscentos-upgrade-idm-pki-tools-debuginfocentos-upgrade-jackson-annotationscentos-upgrade-jackson-corecentos-upgrade-jackson-databindcentos-upgrade-jackson-jaxrs-json-providercentos-upgrade-jackson-jaxrs-providerscentos-upgrade-jackson-module-jaxb-annotationscentos-upgrade-jakarta-commons-httpclientcentos-upgrade-javassistcentos-upgrade-javassist-javadoccentos-upgrade-jsscentos-upgrade-jss-debuginfocentos-upgrade-jss-debugsourcecentos-upgrade-jss-javadoccentos-upgrade-ldapjdkcentos-upgrade-ldapjdk-javadoccentos-upgrade-pki-acmecentos-upgrade-pki-basecentos-upgrade-pki-base-javacentos-upgrade-pki-cacentos-upgrade-pki-core-debuginfocentos-upgrade-pki-core-debugsourcecentos-upgrade-pki-javadoccentos-upgrade-pki-kracentos-upgrade-pki-servercentos-upgrade-pki-servlet-4-0-apicentos-upgrade-pki-servlet-enginecentos-upgrade-pki-symkeycentos-upgrade-pki-toolscentos-upgrade-python-nss-debugsourcecentos-upgrade-python-nss-doccentos-upgrade-python3-idm-pkicentos-upgrade-python3-nsscentos-upgrade-python3-nss-debuginfocentos-upgrade-python3-pkicentos-upgrade-relaxngdatatypecentos-upgrade-resteasycentos-upgrade-slf4jcentos-upgrade-slf4j-jdk14centos-upgrade-stax-excentos-upgrade-tomcatjsscentos-upgrade-velocitycentos-upgrade-xalan-j2centos-upgrade-xerces-j2centos-upgrade-xml-commons-apiscentos-upgrade-xml-commons-resolvercentos-upgrade-xmlstreambuffercentos-upgrade-xsom | Nov 3, 2022 | Jul 29, 2022 |
| Debian | no-fix-debian-deb-package | May 15, 2025 | Jul 29, 2022 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-pki-basehuawei-euleros-2_0_sp5-upgrade-pki-base-javahuawei-euleros-2_0_sp5-upgrade-pki-cahuawei-euleros-2_0_sp5-upgrade-pki-krahuawei-euleros-2_0_sp5-upgrade-pki-serverhuawei-euleros-2_0_sp5-upgrade-pki-symkeyhuawei-euleros-2_0_sp5-upgrade-pki-tools | Jun 9, 2023 | Jul 29, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-pki-symkey | Jun 9, 2023 | Jul 29, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-apache-commons-collectionsoracle-linux-upgrade-apache-commons-langoracle-linux-upgrade-apache-commons-netoracle-linux-upgrade-bea-stax-apioracle-linux-upgrade-glassfish-fastinfosetoracle-linux-upgrade-glassfish-jaxb-apioracle-linux-upgrade-glassfish-jaxb-coreoracle-linux-upgrade-glassfish-jaxb-runtimeoracle-linux-upgrade-glassfish-jaxb-txw2oracle-linux-upgrade-idm-pki-acmeoracle-linux-upgrade-idm-pki-baseoracle-linux-upgrade-idm-pki-base-javaoracle-linux-upgrade-idm-pki-caoracle-linux-upgrade-idm-pki-kraoracle-linux-upgrade-idm-pki-serveroracle-linux-upgrade-idm-pki-symkeyoracle-linux-upgrade-idm-pki-toolsoracle-linux-upgrade-jackson-annotationsoracle-linux-upgrade-jackson-coreoracle-linux-upgrade-jackson-databindoracle-linux-upgrade-jackson-jaxrs-json-provideroracle-linux-upgrade-jackson-jaxrs-providersoracle-linux-upgrade-jackson-module-jaxb-annotationsoracle-linux-upgrade-jakarta-commons-httpclientoracle-linux-upgrade-javassistoracle-linux-upgrade-javassist-javadocoracle-linux-upgrade-jssoracle-linux-upgrade-jss-javadocoracle-linux-upgrade-ldapjdkoracle-linux-upgrade-ldapjdk-javadocoracle-linux-upgrade-pki-acmeoracle-linux-upgrade-pki-baseoracle-linux-upgrade-pki-base-javaoracle-linux-upgrade-pki-caoracle-linux-upgrade-pki-javadocoracle-linux-upgrade-pki-kraoracle-linux-upgrade-pki-serveroracle-linux-upgrade-pki-servlet-4-0-apioracle-linux-upgrade-pki-servlet-engineoracle-linux-upgrade-pki-symkeyoracle-linux-upgrade-pki-toolsoracle-linux-upgrade-python3-idm-pkioracle-linux-upgrade-python3-nssoracle-linux-upgrade-python3-pkioracle-linux-upgrade-python-nss-docoracle-linux-upgrade-relaxngdatatypeoracle-linux-upgrade-resteasyoracle-linux-upgrade-slf4joracle-linux-upgrade-slf4j-jdk14oracle-linux-upgrade-stax-exoracle-linux-upgrade-tomcatjssoracle-linux-upgrade-velocityoracle-linux-upgrade-xalan-j2oracle-linux-upgrade-xerces-j2oracle-linux-upgrade-xml-commons-apisoracle-linux-upgrade-xml-commons-resolveroracle-linux-upgrade-xmlstreambufferoracle-linux-upgrade-xsom | Nov 3, 2022 | Jun 10, 2022 |
| Redhat_linux | redhat-upgrade-apache-commons-collectionsredhat-upgrade-apache-commons-langredhat-upgrade-apache-commons-netredhat-upgrade-bea-stax-apiredhat-upgrade-glassfish-fastinfosetredhat-upgrade-glassfish-jaxb-apiredhat-upgrade-glassfish-jaxb-coreredhat-upgrade-glassfish-jaxb-runtimeredhat-upgrade-glassfish-jaxb-txw2redhat-upgrade-idm-pki-acmeredhat-upgrade-idm-pki-baseredhat-upgrade-idm-pki-base-javaredhat-upgrade-idm-pki-caredhat-upgrade-idm-pki-kraredhat-upgrade-idm-pki-serverredhat-upgrade-idm-pki-symkeyredhat-upgrade-idm-pki-symkey-debuginforedhat-upgrade-idm-pki-toolsredhat-upgrade-idm-pki-tools-debuginforedhat-upgrade-jackson-annotationsredhat-upgrade-jackson-coreredhat-upgrade-jackson-databindredhat-upgrade-jackson-jaxrs-json-providerredhat-upgrade-jackson-jaxrs-providersredhat-upgrade-jackson-module-jaxb-annotationsredhat-upgrade-jakarta-commons-httpclientredhat-upgrade-javassistredhat-upgrade-javassist-javadocredhat-upgrade-jssredhat-upgrade-jss-debuginforedhat-upgrade-jss-debugsourceredhat-upgrade-jss-javadocredhat-upgrade-ldapjdkredhat-upgrade-ldapjdk-javadocredhat-upgrade-pki-acmeredhat-upgrade-pki-baseredhat-upgrade-pki-base-javaredhat-upgrade-pki-caredhat-upgrade-pki-core-debuginforedhat-upgrade-pki-core-debugsourceredhat-upgrade-pki-javadocredhat-upgrade-pki-kraredhat-upgrade-pki-serverredhat-upgrade-pki-servlet-4-0-apiredhat-upgrade-pki-servlet-engineredhat-upgrade-pki-symkeyredhat-upgrade-pki-symkey-debuginforedhat-upgrade-pki-toolsredhat-upgrade-pki-tools-debuginforedhat-upgrade-python-nss-debugsourceredhat-upgrade-python-nss-docredhat-upgrade-python3-idm-pkiredhat-upgrade-python3-nssredhat-upgrade-python3-nss-debuginforedhat-upgrade-python3-pkiredhat-upgrade-relaxngdatatyperedhat-upgrade-resteasyredhat-upgrade-slf4jredhat-upgrade-slf4j-jdk14redhat-upgrade-stax-exredhat-upgrade-tomcatjssredhat-upgrade-velocityredhat-upgrade-xalan-j2redhat-upgrade-xerces-j2redhat-upgrade-xml-commons-apisredhat-upgrade-xml-commons-resolverredhat-upgrade-xmlstreambufferredhat-upgrade-xsom | Nov 3, 2022 | Jul 29, 2022 | |
| Rocky_linux | rocky-upgrade-idm-pki-symkeyrocky-upgrade-idm-pki-symkey-debuginforocky-upgrade-idm-pki-toolsrocky-upgrade-idm-pki-tools-debuginforocky-upgrade-jssrocky-upgrade-jss-debuginforocky-upgrade-jss-debugsourcerocky-upgrade-jss-javadocrocky-upgrade-pki-core-debuginforocky-upgrade-pki-core-debugsourcerocky-upgrade-pki-symkeyrocky-upgrade-pki-toolsrocky-upgrade-python-nss-debugsourcerocky-upgrade-python-nss-docrocky-upgrade-python3-nssrocky-upgrade-python3-nss-debuginfo | Mar 12, 2024 | Jul 29, 2022 | |
| Ubuntu | ubuntu-pro-upgrade-dogtag-pkiubuntu-pro-upgrade-pki-baseubuntu-pro-upgrade-pki-base-javaubuntu-pro-upgrade-pki-caubuntu-pro-upgrade-pki-server | Dec 11, 2024 | Jul 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub