CVE-2020-14338P4MEDIUMCVSS 5.3fixed in 2.12.0·v2.12.02020-09-17
CVE-2020-14338 [MEDIUM] CWE-20 CVE-2020-14338: A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidat
A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature. This flaw allows a specially-crafted XML file to manipulate the validation process in certain cases. This issue is the same flaw as CVE-2020-14621, which affected O
nvd