XML External Entities (XXE)

2018-02-1207:58:06

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

45.1%

JSON

Apache jUDDI is vulnerable to XML External Entity expansion (XXE) attacks. The application does not disable Document Type Definition resolutions, allowing attackers to access sensitive information or conduct XXE attacks that can lead to a denial of service.

CPENameOperatorVersion
juddi client side codele3.3.4
juddi core servicesle3.3.4
juddi web client digital signature appletle3.3.4
juddi gui warle3.3.4
juddi replication services warle3.3.4
uddi technical compatibility kit (tck) basele3.3.4

Name	Operator	Version
juddi client side code	le	3.3.4
juddi core services	le	3.3.4
juddi web client digital signature applet	le	3.3.4
juddi gui war	le	3.3.4
juddi replication services war	le	3.3.4
uddi technical compatibility kit (tck) base	le	3.3.4

References

issues.apache.org/jira/browse/JUDDI-987

0.001 Low

EPSS

Percentile

45.1%

JSON

Related for VERACODE:5803