NVD

Id
31669  
Name
CVE-2014-3481  
Description
org.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor in Red Hat JBoss Enterprise Application Platform (JEAP) before 6.2.4 enables entity expansion, which allows remote attackers to read arbitrary files via unspecified vectors, related to an XML External Entity (XXE) issue.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-07-07  
Modified Date
2017-01-06  
Seq
2014-3481  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
166006 31669 CVE-2014-3481 RHSA-2014:0797  View
166007 31669 CVE-2014-3481 RHSA-2014:0798  View
166008 31669 CVE-2014-3481 RHSA-2014:0799  View
166009 31669 CVE-2014-3481 RHSA-2015:0675  View
166010 31669 CVE-2014-3481 RHSA-2015:0720  View
166011 31669 CVE-2014-3481 RHSA-2015:0765  View
166012 31669 CVE-2014-3481 1032017  View
166013 31669 CVE-2014-3481 redhat-jeap-cve20143481-info-disc(94939)  View
166014 31669 CVE-2014-3481 https://bugzilla.redhat.com/show_bug.cgi?id=1105242  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14378 JVNDB-2014-003253 Red Hat JBoss Enterprise Application の Platformorg.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor における任意のファイルを読まれる脆弱性 Red Hat JBoss Enterprise Application (JEAP) の Platformorg.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor は、エンティティ展開を有効にするため、任意のファイルを読まれる脆弱性が存在します。 CVE-2014-3481 70769 CVE-2014-3481 31669 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003253.html 2014-06-26 2015-05-11 View