AI Score
Confidence
Low
EPSS
Percentile
75.0%
XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.
rhn.redhat.com/errata/RHSA-2015-0034.html
issues.jboss.org/browse/TEIID-2911