NVD

Id
86038  
Name
CVE-2017-7503  
Description
It was found that the Red Hat JBoss EAP 7.0.5 implementation of javax.xml.transform.TransformerFactory is vulnerable to XXE. An attacker could use this flaw to launch DoS or SSRF attacks, or read files from the server where EAP is deployed.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-06-03  
Published
2017-05-18  
Modified Date
2017-05-31  
Seq
2017-7503  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
422627 86038 CVE-2017-0461 https://source.android.com/security/bulletin/2017-03-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
67968 JVNDB-2017-004250 Red Hat JBoss EAP における XML 外部エンティティの脆弱性 Red Hat JBoss EAP には、XML 外部エンティティの脆弱性が存在します。 CVE-2017-7503 0 CVE-2017-7503 86038 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004250.html 2017-05-17 2017-06-21 View