CVE-2015-1818 | BDVDB-2026-70878 Detail

Description#

XML external entity (XXE) vulnerability in the dashbuilder import facility (DocumentBuilders in org.jboss.dashboard.export.ImportManagerImpl) in Red Hat JBoss BPM Suite before 6.1.2 allows remote attackers to read arbitrary files, conduct server-side request forgery (SSRF) attacks, and have other unspecified impact via a crafted XML document.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://rhn.redhat.com/errata/RHSA-2015-1539.html
http://rhn.redhat.com/errata/RHSA-2015-1704.html

Exploit#

No public exploit known

History#

Version 12015-08-11Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.