NVD

Id
19455  
Name
CVE-2016-3674  
Description
Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7) WstxDriver drivers in XStream before 1.4.9 allow remote attackers to read arbitrary files via a crafted XML document.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-05-17  
Modified Date
2016-11-30  
Seq
2016-3674  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
107132 19455 CVE-2016-3674 FEDORA-2016-de909cc333  View
107133 19455 CVE-2016-3674 FEDORA-2016-250042b8a6  View
107134 19455 CVE-2016-3674 DSA-3575  View
107135 19455 CVE-2016-3674 [oss-security] 20160325 CVE request - XStream: XXE vulnerability  View
107136 19455 CVE-2016-3674 [oss-security] 20160328 Re: CVE request - XStream: XXE vulnerability  View
107137 19455 CVE-2016-3674 85381  View
107138 19455 CVE-2016-3674 http://x-stream.github.io/changes.html#1.4.9  View
107139 19455 CVE-2016-3674 https://github.com/x-stream/xstream/issues/25  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2005 JVNDB-2016-002778 XStream の複数のドライバにおける XML 外部エンティティの脆弱性 XStream の (1) Dom4JDriver、(2) DomDriver、(3) JDomDriver、(4) JDom2Driver、(5) SjsxpDriver、(6) StandardStaxDriver、および (7) WstxDriver ドライバには、XML 外部エンティティの脆弱性が存在します。 CVE-2016-3674 90180 CVE-2016-3674 19455 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002778.html 2016-03-15 2016-05-23 View