NVD

Id
24052  
Name
CVE-2015-1818  
Description
XML external entity (XXE) vulnerability in the dashbuilder import facility (DocumentBuilders in org.jboss.dashboard.export.ImportManagerImpl) in Red Hat JBoss BPM Suite before 6.1.2 allows remote attackers to read arbitrary files, conduct server-side request forgery (SSRF) attacks, and have other unspecified impact via a crafted XML document.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-08-11  
Modified Date
2015-08-11  
Seq
2015-1818  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
127667 24052 CVE-2015-1818 RHSA-2015:1539  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8716 JVNDB-2015-004036 Red Hat JBoss BPM Suite の Dashbuilder インポート機能における XML 外部エンティティの脆弱性 Red Hat JBoss BPM Suite の Dashbuilder インポート機能 (DocumentBuilders in org.jboss.dashboard.export.ImportManagerImpl) には、XML 外部エンティティ (XXE) の脆弱性が存在します。 CVE-2015-1818 79043 CVE-2015-1818 24052 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004036.html 2015-08-03 2015-08-12 View