org.exist-db.thirdparty.xerces/xercesImpl… | Sonatype Guide

xercesImpl2.12.2

Latest

org.exist-db.thirdparty.xerces

jar

Published Mar 31, 2022 • Policy compliance

Maven Registry

Developer Trust Score

N/A

Recommended Version: x.y.z

Recommended upgrade that meets your policy.

Compare Versions

Overview

Versions

3

Vulnerabilities

2

Dependencies

1


Severity

Critical (1)

High (0)

Medium (0)

Low (0)

CVSS Score

0.0

EPSS Score

0.0

Malware

All

KEV Status

All

Known Exploited

Not in KEV Catalog: No known exploits

Published

All

Last 7 days

Last 30 days

Last 60 days

Last 90 days

Last 6 months

Last year

Last 2 years

Filter

Sort: Published (Newest first)

Published (Newest first)

Published (Oldest first)

CVSS Score (Critical to Low)

CVSS Score (Low to Critical)


Vulnerability Details

CVE-2017-7503
It was found that the Red Hat JBoss EAP 7.0.5 implementation of javax.xml.transform.TransformerFactory is vulnerable to XXE. An attacker could use this flaw to launch DoS or SSRF attacks, or read files from the server where EAP is deployed.
Severity: Critical
Published: Jul 12, 2017


org.exist-db.thirdparty.xerces/xercesImpl… | Sonatype Guide