Red Hat Inc Jboss Enterprise Application Platform vulnerabilities

1 known vulnerability affecting red_hat_inc/jboss_enterprise_application_platform.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2017-7503CRITICALCVSS 9.8v7.0.52017-05-18

CVE-2017-7503 [CRITICAL] CWE-611 CVE-2017-7503: It was found that the Red Hat JBoss EAP 7.0.5 implementation of javax.xml.transform.TransformerFacto It was found that the Red Hat JBoss EAP 7.0.5 implementation of javax.xml.transform.TransformerFactory is vulnerable to XXE. An attacker could use this flaw to launch DoS or SSRF attacks, or read files from the server where EAP is deployed.