CVE-2017-7503 | BDVDB-2026-85556 Detail

Red HatJBoss Enterprise Application Platform

Description#

It was found that the Red Hat JBoss EAP 7.0.5 implementation of javax.xml.transform.TransformerFactory is vulnerable to XXE. An attacker could use this flaw to launch DoS or SSRF attacks, or read files from the server where EAP is deployed.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/98546
https://bugzilla.redhat.com/show_bug.cgi?id=1451960

Exploit#

No public exploit known

History#

Version 12017-05-18Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.