6.4
CVSSv2

CVE-2017-1000190

Published: 17/11/2017 Updated: 07/11/2023
CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10
CVSS v3 Base Score: 9.1 | Impact Score: 5.2 | Exploitability Score: 3.9
VMScore: 570
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P

Vulnerability Summary

SimpleXML (latest version 2.7.1) is vulnerable to an XXE vulnerability resulting SSRF, information disclosure, DoS and so on.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

simplexml project simplexml 2.7.1

Vendor Advisories

Debian Bug report logs - #888547 CVE-2017-1000190: XXE vulnerability resulting in SSRF, information disclosure, DoS, etc Package: src:simple-xml; Maintainer for src:simple-xml is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Fri, 26 Jan ...

Github Repositories

OWL to Java generates a Java class model from an ontology defined using the W3C Web Ontology Language (OWL). The models are built by taking a specified list of OWL classes and creating Java classes for those OWL classes and their properties.

owl-to-java OWL to Java generates a Java class model from an ontology defined using the W3C Web Ontology Language (OWL) The models are built by taking a specified list of OWL classes and creating Java classes for those OWL classes and their properties Mission statement: Be a useful bridge between ontologies defined using open standards and object models which are of immed