org.exist-db.thirdparty.xerces/xercesImpl… | Sonatype Guide
xercesImpl2.12.2
Latest
org.exist-db.thirdparty.xerces
jar
Published Mar 31, 2022 • Policy compliance
Developer Trust Score
N/A
Recommended Version: x.y.z
Recommended upgrade that meets your policy.
Overview
Versions
3
Vulnerabilities
2
Dependencies
1
Severity
Critical (1)
High (0)
Medium (0)
Low (0)
CVSS Score
0.0
EPSS Score
0.0
Malware
All
KEV Status
All
Known Exploited
Not in KEV Catalog: No known exploits
Published
All
Last 7 days
Last 30 days
Last 60 days
Last 90 days
Last 6 months
Last year
Last 2 years
Filter
Sort: Published (Newest first)
Published (Newest first)
Published (Oldest first)
CVSS Score (Critical to Low)
CVSS Score (Low to Critical)
Vulnerability Details
CVE-2017-7503
It was found that the Red Hat JBoss EAP 7.0.5 implementation of javax.xml.transform.TransformerFactory is vulnerable to XXE. An attacker could use this flaw to launch DoS or SSRF attacks, or read files from the server where EAP is deployed.
Severity: Critical
Published: Jul 12, 2017
org.exist-db.thirdparty.xerces/xercesImpl… | Sonatype Guide