Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

dom4j project dom4j vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2018-1000632
dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specify...
Dom4j Project Dom4jDebian Debian Linux 8.0Oracle Flexcube Investor Servicing 12.3.0Oracle Flexcube Investor Servicing 12.1.0Oracle Flexcube Investor Servicing 12.0.4Oracle Retail Integration Bus 15.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Flexcube Investor Servicing 12.4.0Oracle Flexcube Investor Servicing 14.0.0Oracle Retail Integration Bus 16.0Oracle Utilities Framework 4.4.0.0.0Oracle Primavera P6 Enterprise Project Portfolio ManagementOracle Rapid Planning 12.1Oracle Rapid Planning 12.2Oracle Utilities Framework 4.4.0.2Oracle Utilities Framework 2.2.0Oracle Utilities FrameworkRedhat Satellite Capsule 6.6Redhat Satellite 6.6Redhat Jboss Enterprise Application Platform 6.0.0Redhat Jboss Enterprise Application Platform 6.4.0
7.5
CVSSv2
CVE-2020-10683
dom4j prior to 2.0.3 and 2.1.x prior to 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j...
Dom4j Project Dom4jOracle Insurance Policy Administration J2ee 10.2.0Oracle Insurance Rules Palette 10.2.0Oracle Retail Integration Bus 15.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 11.1.1.9.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 2.2.0.0.0Oracle Flexcube Core Banking 11.7.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Endeca Information Discovery Integrator 3.2.0Oracle Application Testing Suite 13.3.0.1Oracle Retail Order Broker 15.0Oracle Retail Order Broker 16.0Oracle Retail Integration Bus 16.0Oracle Retail Customer Management And Segmentation Foundation 16.0Oracle Retail Customer Management And Segmentation Foundation 17.0Oracle Retail Customer Management And Segmentation Foundation 18.0Oracle Enterprise Data Quality 12.2.1.3.0Oracle Data Integrator 12.2.1.3.0Oracle Utilities Framework 4.4.0.0.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook