CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3481

org.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor in Red Hat JBoss Enterprise Application Platform (JEAP) before 6.2.4 enables entity expansion, which allows remote attackers to read arbitrary files via unspecified vectors, related to an XML External Entity (XXE) issue.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.011

EPSS Ranking 76.7%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2014-3481

Redhat » Jboss Enterprise Application Platform » Version: N/A

cpe:2.3:a:redhat:jboss_enterprise_application_platform:-
Redhat » Jboss Enterprise Application Platform » Version: 4.0.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.0.0
Redhat » Jboss Enterprise Application Platform » Version: 4.2.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0
Redhat » Jboss Enterprise Application Platform » Version: 4.3.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0
Redhat » Jboss Enterprise Application Platform » Version: 5.0.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.0
Redhat » Jboss Enterprise Application Platform » Version: 5.0.1

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.1
Redhat » Jboss Enterprise Application Platform » Version: 5.0.3

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.3
Redhat » Jboss Enterprise Application Platform » Version: 5.1.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.0
Redhat » Jboss Enterprise Application Platform » Version: 5.1.1

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.1
Redhat » Jboss Enterprise Application Platform » Version: 5.1.2

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.2
Redhat » Jboss Enterprise Application Platform » Version: 5.2

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2
Redhat » Jboss Enterprise Application Platform » Version: 5.2.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.0
Redhat » Jboss Enterprise Application Platform » Version: 5.2.1

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.1
Redhat » Jboss Enterprise Application Platform » Version: 5.2.2

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.2
Redhat » Jboss Enterprise Application Platform » Version: 6

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6
Redhat » Jboss Enterprise Application Platform » Version: 6.0.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0
Redhat » Jboss Enterprise Application Platform » Version: 6.0.1

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.1
Redhat » Jboss Enterprise Application Platform » Version: 6.1.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.1.0
Redhat » Jboss Enterprise Application Platform » Version: 6.1.1

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.1.1
Redhat » Jboss Enterprise Application Platform » Version: 6.2.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.2.0
Redhat » Jboss Enterprise Application Platform » Version: 6.2.1

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.2.1
Redhat » Jboss Enterprise Application Platform » Version: 6.2.2

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.2.2
Redhat » Jboss Enterprise Application Platform » Version: 6.2.3

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.2.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3481

Products

Pricing

Contact Us