Lucene search
Veracode Vulnerability DatabaseVERACODE:8075HistoryDec 26, 2018 - 1:56 a.m.
XML External Entity (XXE)
2018-12-2601:56:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
EPSS
0.023
Percentile
89.8%
c3p0 is vulnerable to XML external entity (XXE) attacks. The external entity expansion is not disabled in the XML parser, which would allow a remote attacker to perform XXE attacks via a crafted XML document. This CVE is also known as CVE-2019-5427.
Related
fedora
fedora
[SECURITY] Fedora 30 Update: c3p0-0.9.5.4-1.fc30
2019-05-29 00:50:47
[SECURITY] Fedora 29 Update: c3p0-0.9.5.4-1.fc29
2019-05-29 02:59:54
openvas
openvas
Mageia: Security Advisory (MGASA-2020-0051)
2022-01-28 00:00:00
Fedora Update for c3p0 FEDORA-2019-063672154a
2019-06-02 00:00:00
Fedora Update for c3p0 FEDORA-2019-cb14e234fc
2019-05-29 00:00:00
githubexploit
githubexploit
hackerone
hackerone
nessus
nessus
Fedora 29 : c3p0 (2019-063672154a)
2019-05-29 00:00:00
Fedora 30 : c3p0 (2019-cb14e234fc)
2019-05-29 00:00:00
Debian DLA-1621-1 : c3p0 security update
2018-12-31 00:00:00
mageia
mageia
Updated c3p0 packages fix security vulnerabilities
2020-01-28 10:52:40
ubuntucve
ubuntucve
CVE-2018-20433
2018-12-24 00:00:00
CVE-2019-5427
2019-04-22 00:00:00
osv
osv
CVE-2018-20433
2018-12-24 13:29:00
c3p0-0.9.5.5-1.3 on GA media
2024-06-15 00:00:00
XML External Entity Reference in mchange:c3p0
2019-01-07 19:14:34
cve
cve
CVE-2018-20433
2018-12-24 13:29:00
CVE-2019-5427
2019-04-22 21:29:00
github
github
XML External Entity Reference in mchange:c3p0
2019-01-07 19:14:34
Billion laughs attack in c3p0
2019-04-23 16:03:18
redhatcve
redhatcve
CVE-2018-20433
2019-01-09 14:20:42
CVE-2019-5427
2019-05-14 12:50:17
debian
debian
[SECURITY] [DLA 1621-1] c3p0 security update
2018-12-28 18:58:36
cvelist
cvelist
CVE-2018-20433
2018-12-24 13:00:00
CVE-2019-5427
2019-04-22 20:52:56
prion
prion
Design/Logic Flaw
2018-12-24 13:29:00
Design/Logic Flaw
2019-04-22 21:29:00
debiancve
debiancve
CVE-2018-20433
2018-12-24 13:29:00
CVE-2019-5427
2019-04-22 21:29:00
nvd
nvd
CVE-2018-20433
2018-12-24 13:29:00
CVE-2019-5427
2019-04-22 21:29:00
ubuntu
ubuntu
c3p0 vulnerability
2022-02-22 00:00:00
c3p0 vulnerability
2022-02-21 00:00:00
veracode
veracode
XML Entity Expansion (XEE)
2019-07-08 15:36:42
ibm
ibm
Security Bulletin: Multiple Vulnerabilities identified in IBM StoredIQ
2020-02-20 12:42:12
redhat
redhat
(RHSA-2020:0983) Important: Red Hat Fuse 7.6.0 security update
2020-03-26 15:40:22
oracle
oracle
Oracle Critical Patch Update Advisory - January 2021
2021-01-19 00:00:00
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00
Oracle Critical Patch Update Advisory - July 2020
2020-07-14 00:00:00