CVE

Id
75426  
CVE No.
CVE-2014-8125  
Status
Candidate  
Description
XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPMN2 file.  
Phase
Assigned (20141010)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
699469 75426 CVE-2014-8125 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1169553  View
699470 75426 CVE-2014-8125 CONFIRM:https://github.com/droolsjbpm/drools/commit/c48464c3b246e6ef0d4cd0dbf67e83ccd532c6d3  View
699471 75426 CVE-2014-8125 CONFIRM:https://github.com/droolsjbpm/jbpm/commit/713e8073ecf45623cfc5c918c5cbf700203f46e5  View
699472 75426 CVE-2014-8125 REDHAT:RHSA-2015:0850  View
699473 75426 CVE-2014-8125 URL:http://rhn.redhat.com/errata/RHSA-2015-0850.html  View
699474 75426 CVE-2014-8125 REDHAT:RHSA-2015:0851  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
18394 JVNDB-2014-007269 Linux Kernel の Thread Local Storage の実装の arch/x86/kernel/tls.c における espfix 保護メカニズムを回避される脆弱性 Linux Kernel の Thread Local Storage (TLS) の実装の arch/x86/kernel/tls.c には、espfix 保護メカニズムを回避され、その結果、ASLR 保護メカニズムを回避される脆弱性が存在します。 CVE-2014-8133 75426 2.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007269.html  View