Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-1833HistoryMay 29, 2015 - 3:59 p.m.
CVE-2015-1833
2015-05-2915:59:13
Debian Security Bug Tracker
security-tracker.debian.org
9
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.019 Low
EPSS
Percentile
88.6%
XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.1, and 2.10.x before 2.10.1 allows remote attackers to read arbitrary files and send requests to intranet servers via a crafted WebDAV request.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | jackrabbit | < 2.10.1-1 | jackrabbit_2.10.1-1_all.deb |
| Debian | 11 | all | jackrabbit | < 2.10.1-1 | jackrabbit_2.10.1-1_all.deb |
| Debian | 999 | all | jackrabbit | < 2.10.1-1 | jackrabbit_2.10.1-1_all.deb |
| Debian | 13 | all | jackrabbit | < 2.10.1-1 | jackrabbit_2.10.1-1_all.deb |
Related
nessus
nessus
Debian DSA-3298-1 : jackrabbit - security update
2015-07-01 00:00:00
osv
osv
Improper Input Validation in Apache Jackrabbit
2022-05-14 02:49:30
securityvulns
securityvulns
Apache Jackrabbit XXE
2015-06-08 00:00:00
CVE-2015-1833 (Jackrabbit WebDAV XXE vulnerability)
2015-06-08 00:00:00
ubuntucve
ubuntucve
CVE-2015-1833
2015-05-29 00:00:00
exploitpack
exploitpack
Apache JackRabbit - WebDAV XML External Entity
2015-05-26 00:00:00
zdt
zdt
Apache Jackrabbit WebDAV XXE Exploit
2015-05-27 00:00:00
debian
debian
[SECURITY] [DSA 3298-1] jackrabbit security update
2015-06-30 22:38:40
mageia
mageia
Updated jackrabbit packages fix CVE-2015-1833
2015-06-09 00:17:51
nvd
nvd
CVE-2015-1833
2015-05-29 15:59:13
openvas
openvas
Debian Security Advisory DSA 3298-1 (jackrabbit - security update)
2015-07-01 00:00:00
Debian: Security Advisory (DSA-3298-1)
2015-06-30 00:00:00
Mageia: Security Advisory (MGASA-2015-0242)
2022-01-28 00:00:00
cvelist
cvelist
CVE-2015-1833
2015-05-29 15:00:00
cve
cve
CVE-2015-1833
2015-05-29 15:59:13
github
github
Improper Input Validation in Apache Jackrabbit
2022-05-14 02:49:30
prion
prion
Xxe
2015-05-29 15:59:00
exploitdb
exploitdb
Apache JackRabbit - WebDAV XML External Entity
2015-05-26 00:00:00
packetstorm
packetstorm
Milton Webdav 2.7.0.1 XXE Injection
2015-11-02 00:00:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.019 Low
EPSS
Percentile
88.6%
Related for DEBIANCVE:CVE-2015-1833