CVE-2017-15691 — Vulnetix

Try Vulnetix Request Demo

CVE-2017-15691 PUBLISHED

In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion (XXE) capability of various XML parsers. UIMA as part of its configuration and operation may read XML from various sources, which could be tainted in ways to cause inadvertent disclosure of local files or other internal content.

EPSS 0.78% · 73.5th percentile

Risk Scores

EPSS Score

0.78%

73.5th percentile

Affected Products

Vendor	Product	Versions
Ubuntu:18.04:LTS	uimaj	0, 2.10.1-1, 2.10.1-2
Ubuntu:16.04:LTS	uimaj	2.7.0-1, 2.8.1-1, 0

Timeline

Apr 26, 2018 CVE Published
Apr 14, 2021 EPSS Score
Jun 22, 2021 EPSS Score
Aug 23, 2021 EPSS Score
Dec 25, 2021 EPSS Score
Feb 4, 2022 EPSS Score
Feb 25, 2022 EPSS Score
Apr 28, 2022 EPSS Score
Aug 31, 2022 EPSS Score
Nov 1, 2022 EPSS Score
Jan 2, 2023 EPSS Score
Mar 5, 2023 EPSS Score

References

https://ubuntu.com/security/CVE-2017-15691 third-party-advisory
https://uima.apache.org/security_report#CVE-2017-15691 third-party-advisory
https://www.cve.org/CVERecord?id=CVE-2017-15691 third-party-advisory

Open in Interactive Console →