Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-1307

In Apache jUDDI 3.2 through 3.3.4, if using the WADL2Java or WSDL2Java classes, which parse a local or remote XML document and then mediates the data structures into UDDI data structures, there are little protections present against entity expansion and DTD type of attacks. Mitigation is to use 3.3.5.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 77.8%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 6.8
Products affected by CVE-2018-1307
  • Apache » Juddi » Version: 3.2
    cpe:2.3:a:apache:juddi:3.2
  • Apache » Juddi » Version: 3.2.0
    cpe:2.3:a:apache:juddi:3.2.0
  • Apache » Juddi » Version: 3.2.1
    cpe:2.3:a:apache:juddi:3.2.1
  • Apache » Juddi » Version: 3.3.0
    cpe:2.3:a:apache:juddi:3.3.0
  • Apache » Juddi » Version: 3.3.1
    cpe:2.3:a:apache:juddi:3.3.1
  • Apache » Juddi » Version: 3.3.2
    cpe:2.3:a:apache:juddi:3.3.2
  • Apache » Juddi » Version: 3.3.3
    cpe:2.3:a:apache:juddi:3.3.3
  • Apache » Juddi » Version: 3.3.4
    cpe:2.3:a:apache:juddi:3.3.4


Products
Pricing
Contact Us

Shodan ® - All rights reserved