NVD

Id
22743  
Name
CVE-2015-0254  
Description
Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) <x:parse> or (2) <x:transform> JSTL XML tag.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-03-09  
Modified Date
2016-12-21  
Seq
2015-0254  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
120478 22743 CVE-2015-0254 openSUSE-SU-2015:1751  View
120479 22743 CVE-2015-0254 [tomcat-taglibs-user] 20150227 [SECURITY] CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags  View
120480 22743 CVE-2015-0254 http://packetstormsecurity.com/files/130575/Apache-Standard-Taglibs-1.2.1-XXE-Remote-Command-Execution.html  View
120481 22743 CVE-2015-0254 RHSA-2015:1695  View
120482 22743 CVE-2015-0254 RHSA-2016:1838  View
120483 22743 CVE-2015-0254 RHSA-2016:1839  View
120484 22743 CVE-2015-0254 RHSA-2016:1840  View
120485 22743 CVE-2015-0254 RHSA-2016:1841  View
120486 22743 CVE-2015-0254 20150227 [SECURITY] CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags  View
120487 22743 CVE-2015-0254 72809  View
120488 22743 CVE-2015-0254 1034934  View
120489 22743 CVE-2015-0254 USN-2551-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6396 JVNDB-2015-001716 Apache Standard Taglibs における任意のコードを実行される脆弱性 Apache Standard Taglibs には、任意のコードを実行される、または XML 外部エンティティ (XXE) 攻撃を実行される脆弱性が存在します。 CVE-2015-0254 77465 CVE-2015-0254 22743 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001716.html 2015-02-27 2016-06-01 View