Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-idm-pkiUpgrade pki-serverUpgrade pki-kraUpgrade pki-symkeyUpgrade pki-base-javaUpgrade idm-pki-caUpgrade idm-pki-toolsUpgrade pki-acmeUpgrade idm-pki-kraUpgrade idm-pki-base-javaUpgrade pki-toolsUpgrade ldapjdk-javadocUpgrade idm-pki-acmeUpgrade pki-baseUpgrade pki-caUpgrade idm-pki-symkeyUpgrade python3-pkiUpgrade idm-pki-baseUpgrade idm-pki-server | Nov 4, 2022 | Jul 29, 2022 |
| Amazon Linux Ami 2 | — | Upgrade pki-baseUpgrade pki-symkeyUpgrade pki-base-javaUpgrade pki-toolsUpgrade pki-javadocUpgrade pki-caUpgrade pki-core-debuginfoUpgrade pki-serverUpgrade pki-kra | Apr 21, 2023 | Jul 29, 2022 |
| Centos_linux | — | Upgrade slf4jUpgrade idm-pki-serverUpgrade jss-debugsourceUpgrade jss-debuginfoUpgrade xsomUpgrade idm-pki-baseUpgrade jackson-databindUpgrade python3-nss-debuginfoUpgrade idm-pki-tools-debuginfoUpgrade slf4j-jdk14Upgrade pki-acmeUpgrade pki-caUpgrade jssUpgrade jackson-coreUpgrade jackson-jaxrs-json-providerUpgrade idm-pki-caUpgrade python3-nssUpgrade stax-exUpgrade python-nss-docUpgrade xml-commons-resolverUpgrade jackson-jaxrs-providersUpgrade pki-kraUpgrade glassfish-jaxb-runtimeUpgrade pki-toolsUpgrade pki-symkeyUpgrade apache-commons-collectionsUpgrade python-nss-debugsourceUpgrade pki-core-debugsourceUpgrade xml-commons-apisUpgrade xmlstreambufferUpgrade idm-pki-symkey-debuginfoUpgrade pki-baseUpgrade pki-core-debuginfoUpgrade pki-servlet-4.0-apiUpgrade javassist-javadocUpgrade idm-pki-acmeUpgrade jss-javadocUpgrade xerces-j2Upgrade python3-pkiUpgrade apache-commons-langUpgrade xalan-j2Upgrade ldapjdkUpgrade tomcatjssUpgrade glassfish-fastinfosetUpgrade jakarta-commons-httpclientUpgrade idm-pki-base-javaUpgrade javassistUpgrade jackson-module-jaxb-annotationsUpgrade idm-pki-kraUpgrade glassfish-jaxb-txw2Upgrade resteasyUpgrade python3-idm-pkiUpgrade apache-commons-netUpgrade pki-serverUpgrade pki-base-javaUpgrade idm-pki-toolsUpgrade relaxngDatatypeUpgrade jackson-annotationsUpgrade glassfish-jaxb-coreUpgrade idm-pki-symkeyUpgrade glassfish-jaxb-apiUpgrade ldapjdk-javadocUpgrade bea-stax-apiUpgrade pki-servlet-engineUpgrade velocityUpgrade pki-javadoc | Nov 3, 2022 | Jul 29, 2022 |
| Debian | — | No solution exists | May 15, 2025 | Jul 29, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade pki-toolsUpgrade pki-kraUpgrade pki-caUpgrade pki-symkeyUpgrade pki-base-javaUpgrade pki-baseUpgrade pki-server | Jun 9, 2023 | Jul 29, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade pki-symkey | Jun 9, 2023 | Jul 29, 2022 |
| Oracle_linux | — | Upgrade relaxngDatatypeUpgrade idm-pki-serverUpgrade glassfish-jaxb-txw2Upgrade apache-commons-langUpgrade jackson-coreUpgrade jackson-jaxrs-json-providerUpgrade pki-acmeUpgrade javassist-javadocUpgrade xalan-j2Upgrade pki-kraUpgrade pki-toolsUpgrade glassfish-fastinfosetUpgrade jackson-annotationsUpgrade slf4jUpgrade xml-commons-apisUpgrade resteasyUpgrade pki-base-javaUpgrade jss-javadocUpgrade pki-servlet-4.0-apiUpgrade jackson-module-jaxb-annotationsUpgrade apache-commons-netUpgrade python3-pkiUpgrade xsomUpgrade pki-caUpgrade tomcatjssUpgrade pki-serverUpgrade apache-commons-collectionsUpgrade jackson-jaxrs-providersUpgrade idm-pki-caUpgrade idm-pki-kraUpgrade python3-idm-pkiUpgrade pki-symkeyUpgrade ldapjdkUpgrade idm-pki-base-javaUpgrade idm-pki-baseUpgrade python3-nssUpgrade idm-pki-toolsUpgrade idm-pki-symkeyUpgrade jssUpgrade pki-baseUpgrade pki-javadocUpgrade xmlstreambufferUpgrade glassfish-jaxb-apiUpgrade javassistUpgrade velocityUpgrade python-nss-docUpgrade pki-servlet-engineUpgrade jakarta-commons-httpclientUpgrade bea-stax-apiUpgrade idm-pki-acmeUpgrade ldapjdk-javadocUpgrade stax-exUpgrade slf4j-jdk14Upgrade glassfish-jaxb-coreUpgrade glassfish-jaxb-runtimeUpgrade xml-commons-resolverUpgrade xerces-j2Upgrade jackson-databind | Nov 3, 2022 | Jun 10, 2022 |
| Redhat_linux | — | Upgrade pki-tools-debuginfoUpgrade pki-servlet-engineUpgrade idm-pki-acmeUpgrade idm-pki-toolsUpgrade pki-javadocUpgrade pki-serverUpgrade pki-symkey-debuginfoUpgrade jss-javadocUpgrade ldapjdkUpgrade python3-pkiUpgrade relaxngDatatypeUpgrade idm-pki-base-javaUpgrade glassfish-jaxb-apiUpgrade ldapjdk-javadocUpgrade xerces-j2Upgrade tomcatjssUpgrade velocityUpgrade jackson-module-jaxb-annotationsUpgrade resteasyUpgrade stax-exUpgrade python3-idm-pkiUpgrade apache-commons-netUpgrade idm-pki-kraUpgrade idm-pki-symkeyUpgrade javassist-javadocUpgrade apache-commons-langUpgrade jakarta-commons-httpclientUpgrade pki-base-javaUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-txw2Upgrade glassfish-jaxb-coreUpgrade javassistUpgrade jackson-annotationsUpgrade xalan-j2Upgrade bea-stax-apiUpgrade idm-pki-caUpgrade jssUpgrade xsomUpgrade pki-baseUpgrade xmlstreambufferUpgrade python-nss-debugsourceUpgrade python-nss-docUpgrade python3-nssUpgrade jss-debugsourceUpgrade jackson-coreUpgrade idm-pki-tools-debuginfoUpgrade pki-caNo solution existsUpgrade idm-pki-baseUpgrade slf4j-jdk14Upgrade pki-core-debuginfoUpgrade slf4jUpgrade jss-debuginfoUpgrade xml-commons-apisUpgrade pki-kraUpgrade pki-core-debugsourceUpgrade pki-servlet-4.0-apiUpgrade glassfish-jaxb-runtimeUpgrade xml-commons-resolverUpgrade python3-nss-debuginfoUpgrade idm-pki-serverUpgrade pki-toolsUpgrade pki-symkeyUpgrade jackson-databindUpgrade idm-pki-symkey-debuginfoUpgrade pki-acmeUpgrade apache-commons-collectionsUpgrade jackson-jaxrs-json-providerUpgrade jackson-jaxrs-providers | Nov 3, 2022 | Jul 29, 2022 |
| Rocky_linux | — | Upgrade idm-pki-toolsUpgrade pki-core-debugsourceUpgrade pki-symkeyUpgrade python-nss-debugsourceUpgrade idm-pki-symkeyUpgrade python-nss-docUpgrade python3-nssUpgrade jss-debuginfoUpgrade python3-nss-debuginfoUpgrade jss-debugsourceUpgrade pki-core-debuginfoUpgrade pki-toolsUpgrade idm-pki-tools-debuginfoUpgrade jssUpgrade jss-javadocUpgrade idm-pki-symkey-debuginfo | Mar 12, 2024 | Jul 29, 2022 |
| Ubuntu | — | Upgrade pki-base-java (Ubuntu Pro)Upgrade pki-server (Ubuntu Pro)Upgrade pki-base (Ubuntu Pro)Upgrade dogtag-pki (Ubuntu Pro)Upgrade pki-ca (Ubuntu Pro) | Dec 11, 2024 | Jul 29, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub