CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-4517

Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.131

EPSS Ranking 93.8%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2013-4517

Apache » Santuario Xml Security For Java » Version: 1.1

cpe:2.3:a:apache:santuario_xml_security_for_java:1.1
Apache » Santuario Xml Security For Java » Version: 1.2.0

cpe:2.3:a:apache:santuario_xml_security_for_java:1.2.0
Apache » Santuario Xml Security For Java » Version: 1.2.1

cpe:2.3:a:apache:santuario_xml_security_for_java:1.2.1
Apache » Santuario Xml Security For Java » Version: 1.3.0

cpe:2.3:a:apache:santuario_xml_security_for_java:1.3.0
Apache » Santuario Xml Security For Java » Version: 1.4.0

cpe:2.3:a:apache:santuario_xml_security_for_java:1.4.0
Apache » Santuario Xml Security For Java » Version: 1.4.1

cpe:2.3:a:apache:santuario_xml_security_for_java:1.4.1
Apache » Santuario Xml Security For Java » Version: 1.4.2

cpe:2.3:a:apache:santuario_xml_security_for_java:1.4.2
Apache » Santuario Xml Security For Java » Version: 1.4.3

cpe:2.3:a:apache:santuario_xml_security_for_java:1.4.3
Apache » Santuario Xml Security For Java » Version: 1.4.4

cpe:2.3:a:apache:santuario_xml_security_for_java:1.4.4
Apache » Santuario Xml Security For Java » Version: 1.4.5

cpe:2.3:a:apache:santuario_xml_security_for_java:1.4.5
Apache » Santuario Xml Security For Java » Version: 1.4.6

cpe:2.3:a:apache:santuario_xml_security_for_java:1.4.6
Apache » Santuario Xml Security For Java » Version: 1.4.7

cpe:2.3:a:apache:santuario_xml_security_for_java:1.4.7
Apache » Santuario Xml Security For Java » Version: 1.4.8

cpe:2.3:a:apache:santuario_xml_security_for_java:1.4.8
Apache » Santuario Xml Security For Java » Version: 1.5.0

cpe:2.3:a:apache:santuario_xml_security_for_java:1.5.0
Apache » Santuario Xml Security For Java » Version: 1.5.1

cpe:2.3:a:apache:santuario_xml_security_for_java:1.5.1
Apache » Santuario Xml Security For Java » Version: 1.5.2

cpe:2.3:a:apache:santuario_xml_security_for_java:1.5.2
Apache » Santuario Xml Security For Java » Version: 1.5.3

cpe:2.3:a:apache:santuario_xml_security_for_java:1.5.3
Apache » Santuario Xml Security For Java » Version: 1.5.4

cpe:2.3:a:apache:santuario_xml_security_for_java:1.5.4
Apache » Santuario Xml Security For Java » Version: 1.5.5

cpe:2.3:a:apache:santuario_xml_security_for_java:1.5.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-4517

Products

Pricing

Contact Us