CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-1833

XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.1, and 2.10.x before 2.10.1 allows remote attackers to read arbitrary files and send requests to intranet servers via a crafted WebDAV request.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.347

EPSS Ranking 96.8%

CVSS Severity

CVSS v2 Score 6.4

References

Products affected by CVE-2015-1833

Apache » Jackrabbit » Version: 1.4

cpe:2.3:a:apache:jackrabbit:1.4
Apache » Jackrabbit » Version: 1.5.0

cpe:2.3:a:apache:jackrabbit:1.5.0
Apache » Jackrabbit » Version: 2.0.5

cpe:2.3:a:apache:jackrabbit:2.0.5
Apache » Jackrabbit » Version: 2.10.0

cpe:2.3:a:apache:jackrabbit:2.10.0
Apache » Jackrabbit » Version: 2.2.0

cpe:2.3:a:apache:jackrabbit:2.2.0
Apache » Jackrabbit » Version: 2.2.1

cpe:2.3:a:apache:jackrabbit:2.2.1
Apache » Jackrabbit » Version: 2.2.10

cpe:2.3:a:apache:jackrabbit:2.2.10
Apache » Jackrabbit » Version: 2.2.11

cpe:2.3:a:apache:jackrabbit:2.2.11
Apache » Jackrabbit » Version: 2.2.12

cpe:2.3:a:apache:jackrabbit:2.2.12
Apache » Jackrabbit » Version: 2.2.13

cpe:2.3:a:apache:jackrabbit:2.2.13
Apache » Jackrabbit » Version: 2.2.2

cpe:2.3:a:apache:jackrabbit:2.2.2
Apache » Jackrabbit » Version: 2.2.4

cpe:2.3:a:apache:jackrabbit:2.2.4
Apache » Jackrabbit » Version: 2.2.5

cpe:2.3:a:apache:jackrabbit:2.2.5
Apache » Jackrabbit » Version: 2.2.7

cpe:2.3:a:apache:jackrabbit:2.2.7
Apache » Jackrabbit » Version: 2.2.8

cpe:2.3:a:apache:jackrabbit:2.2.8
Apache » Jackrabbit » Version: 2.2.9

cpe:2.3:a:apache:jackrabbit:2.2.9
Apache » Jackrabbit » Version: 2.4.0

cpe:2.3:a:apache:jackrabbit:2.4.0
Apache » Jackrabbit » Version: 2.4.1

cpe:2.3:a:apache:jackrabbit:2.4.1
Apache » Jackrabbit » Version: 2.4.2

cpe:2.3:a:apache:jackrabbit:2.4.2
Apache » Jackrabbit » Version: 2.4.3

cpe:2.3:a:apache:jackrabbit:2.4.3
Apache » Jackrabbit » Version: 2.4.4

cpe:2.3:a:apache:jackrabbit:2.4.4
Apache » Jackrabbit » Version: 2.4.5

cpe:2.3:a:apache:jackrabbit:2.4.5
Apache » Jackrabbit » Version: 2.6.0

cpe:2.3:a:apache:jackrabbit:2.6.0
Apache » Jackrabbit » Version: 2.6.1

cpe:2.3:a:apache:jackrabbit:2.6.1
Apache » Jackrabbit » Version: 2.6.2

cpe:2.3:a:apache:jackrabbit:2.6.2
Apache » Jackrabbit » Version: 2.6.3

cpe:2.3:a:apache:jackrabbit:2.6.3
Apache » Jackrabbit » Version: 2.6.4

cpe:2.3:a:apache:jackrabbit:2.6.4
Apache » Jackrabbit » Version: 2.6.5

cpe:2.3:a:apache:jackrabbit:2.6.5
Apache » Jackrabbit » Version: 2.8.0

cpe:2.3:a:apache:jackrabbit:2.8.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-1833

Products

Pricing

Contact Us