Vulnetix
Try Vulnetix Request Demo
CVE-2015-1818 PUBLISHED CVSS 7.5 HIGH

XML external entity (XXE) vulnerability in the dashbuilder import facility (DocumentBuilders in org.jboss.dashboard.export.ImportManagerImpl) in Red Hat JBoss BPM Suite before 6.1.2 allows remote attackers to read arbitrary files, conduct server-side request forgery (SSRF) attacks, and have other unspecified impact via a crafted XML document.

EPSS 0.54% · 67.3th percentile

Risk Scores

CVSS v2.0
7.5
EPSS Score
0.54%
67.3th percentile

Affected Products

VendorProductVersions
n/an/an/a
redhatjboss_bpm_suite0

Timeline

References

Open in Interactive Console →