Vulnetix
Try Vulnetix Request Demo
CVE-2015-1832 PUBLISHED

XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via vectors involving XmlVTI and the XML datatype.

EPSS 0.82% · 74.2th percentile

Risk Scores

EPSS Score
0.82%
74.2th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSderby0, 10.10.2.0-1

Timeline

References

Open in Interactive Console →