Description

org.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor in Red Hat JBoss Enterprise Application Platform (JEAP) before 6.2.4 enables entity expansion, which allows remote attackers to read arbitrary files via unspecified vectors, related to an XML External Entity (XXE) issue.

Remediation

References

CVE-2014-3481

Related Vulnerabilities

WordPress Plugin Product Catalog Multiple SQL Injection Vulnerabilities (2.1)

WordPress Plugin BibleGet I/O Unspecified Vulnerability (3.4)

WordPress Plugin Chatbot with IBM Watson Cross-Site Scripting (0.8.20)

Oracle Database Server Other Vulnerability (CVE-2005-3446)

WebLogic CVE-2017-10148 Vulnerability (CVE-2017-10148)

Severity

Medium

Classification

CVE-2014-3481 CWE-200

Tags

Missing Update Known Vulnerabilities