NVD

Id
25146  
Name
CVE-2015-3269  
Description
Apache Flex BlazeDS, as used in flex-messaging-core.jar in Adobe LiveCycle Data Services (LCDS) 3.0.x before 3.0.0.354170, 4.5 before 4.5.1.354169, 4.6.2 before 4.6.2.354169, and 4.7 before 4.7.0.354169 and other products, allows remote attackers to read arbitrary files via an AMF message containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-08-24  
Modified Date
2016-12-21  
Seq
2015-3269  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
133004 25146 CVE-2015-3269 HPSBGN03550  View
133005 25146 CVE-2015-3269 20150819 CVE-2015-3269 Apache Flex BlazeDS Insecure Xml Entity Expansion Vulnerability  View
133006 25146 CVE-2015-3269 76394  View
133007 25146 CVE-2015-3269 1033337  View
133008 25146 CVE-2015-3269 http://www.vmware.com/security/advisories/VMSA-2015-0008.html  View
133009 25146 CVE-2015-3269 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05026202  View
133010 25146 CVE-2015-3269 https://helpx.adobe.com/content/help/en/security/products/coldfusion/apsb15-21.html  View
133011 25146 CVE-2015-3269 https://helpx.adobe.com/security/products/livecycleds/apsb15-20.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9111 JVNDB-2015-004431 Adobe LiveCycle Data Services などの製品の flex-messaging-core.jar で使用される Apache Flex BlazeDS における任意のファイルを読まれる脆弱性 Adobe LiveCycle Data Services (LCDS) などの製品の flex-messaging-core.jar で使用される Apache Flex BlazeDS には、任意のファイルを読まれる脆弱性が存在します。 CVE-2015-3269 80494 CVE-2015-3269 25146 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004431.html 2015-08-18 2016-03-24 View