Lucene search
Veracode Vulnerability DatabaseVERACODE:27572HistoryOct 14, 2020 - 4:33 a.m.
Validation Bypass
2020-10-1404:33:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.001 Low
EPSS
Percentile
38.9%
wildfly is vulnerable to validation bypass. An XML validation manipulation vulnerability exists due to incomplete application of use-grammar-pool-only in xercesImpl.
References
access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.3/
access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/
access.redhat.com/errata/RHSA-2020:4245
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=1860054
lists.apache.org/thread.html/rf96c5afb26b596b4b97883aa90b6c0b0fc4c26aaeea7123c21912103@%3Cj-users.xerces.apache.org%3E
Related
nvd
nvd
CVE-2020-14338
2020-09-17 15:15:13
cve
cve
CVE-2020-14338
2020-09-17 15:15:13
osv
osv
Improper Input Validation in Xerces
2022-02-15 01:37:41
redhat
redhat
cvelist
cvelist
CVE-2020-14338
2020-09-17 14:06:25
prion
prion
Design/Logic Flaw
2020-09-17 15:15:00
redhatcve
redhatcve
CVE-2020-14338
2020-08-27 13:38:09
github
github
Improper Input Validation in Xerces
2022-02-15 01:37:41
nessus
nessus
