vulnerability

Red Hat JBoss EAP: CVE-2019-10172: Improper Restriction of XML External Entity Reference

Name: Red Hat JBoss EAP: CVE-2019-10172: Improper Restriction of XML External Entity Reference
Creator: Red Hat
Published: 2019-11-18T00:00:00.000Z
Keywords: CVE, CWE-611, Red Hat JBoss EAP, 2019, 10172, Improper Restriction of XML External Entity Reference, red-hat-jboss-eap-upgrade-latest, Severity 5

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:H/Au:N/C:N/I:C/A:N)

Published

Nov 18, 2019

Added

Sep 19, 2024

Modified

Jul 2, 2025

Description

A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.. A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries such that an XML external entity (XXE) vulnerability affects codehaus's jackson-mapper-asl libraries. This vulnerability is similar to CVE-2016-3720. The primary threat from this flaw is data integrity.

Solution

red-hat-jboss-eap-upgrade-latest

References

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report