Поиск уязвимостей
Количество 19
Количество 19
ALT-PU-2021-4984
ALT-PU-2021-4984: package `dom4j` update to version 2.0.3-alt1_1jpp11
CVE-2020-10683
dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j.
CVE-2020-10683
dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j.
CVE-2020-10683
dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j.
CVE-2020-10683
dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and Ext ...
CVE-2018-1000632
dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.
CVE-2018-1000632
dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.
CVE-2018-1000632
dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.
CVE-2018-1000632
dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection ...
openSUSE-SU-2020:0719-1
Security update for dom4j
GHSA-hwj3-m3p6-hj38
dom4j allows External Entities by default which might enable XXE attacks
BDU:2020-04038
Уязвимость реализации функции new org.dom4j.io.SAXReader() библиотеки для работы с XML, XPath и XSLT dom4j, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
openSUSE-SU-2018:3998-1
Security update for dom4j
openSUSE-SU-2018:2931-1
Security update for dom4j
SUSE-SU-2018:3908-1
Security update for dom4j
SUSE-SU-2018:3424-1
Security update for dom4j
GHSA-6pcc-3rfx-4gpm
Dom4j contains a XML Injection vulnerability
BDU:2025-11250
Уязвимость методов addElement и addAttribute библиотеки для работы с XML, XPath и XSLT dom4j, позволяющая нарушителю проводить XXE-атаки
ROS-20250822-02
Уязвимость dom4j
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2021-4984 ALT-PU-2021-4984: package `dom4j` update to version 2.0.3-alt1_1jpp11 | CVSS3: 9.8 | больше 5 лет назад | |
 | CVE-2020-10683 dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j. | CVSS3: 9.8 | 7% Низкий | больше 6 лет назад |
 | CVE-2020-10683 dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j. | CVSS3: 7.4 | 7% Низкий | больше 6 лет назад |
 | CVE-2020-10683 dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j. | CVSS3: 9.8 | 7% Низкий | больше 6 лет назад |
| CVE-2020-10683 dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and Ext ... | CVSS3: 9.8 | 7% Низкий | больше 6 лет назад |
| CVE-2018-1000632 dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later. | CVSS3: 7.5 | 7% Низкий | около 8 лет назад |
| CVE-2018-1000632 dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later. | CVSS3: 5.3 | 7% Низкий | больше 8 лет назад |
| CVE-2018-1000632 dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later. | CVSS3: 7.5 | 7% Низкий | около 8 лет назад |
| CVE-2018-1000632 dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection ... | CVSS3: 7.5 | 7% Низкий | около 8 лет назад |
 | openSUSE-SU-2020:0719-1 Security update for dom4j | 7% Низкий | больше 6 лет назад | |
| GHSA-hwj3-m3p6-hj38 dom4j allows External Entities by default which might enable XXE attacks | CVSS3: 9.8 | 7% Низкий | больше 6 лет назад |
 | BDU:2020-04038 Уязвимость реализации функции new org.dom4j.io.SAXReader() библиотеки для работы с XML, XPath и XSLT dom4j, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 9.8 | 7% Низкий | больше 7 лет назад |
| openSUSE-SU-2018:3998-1 Security update for dom4j | 7% Низкий | почти 8 лет назад | |
| openSUSE-SU-2018:2931-1 Security update for dom4j | 7% Низкий | около 8 лет назад | |
| SUSE-SU-2018:3908-1 Security update for dom4j | 7% Низкий | около 8 лет назад | |
| SUSE-SU-2018:3424-1 Security update for dom4j | 7% Низкий | около 8 лет назад | |
| GHSA-6pcc-3rfx-4gpm Dom4j contains a XML Injection vulnerability | CVSS3: 7.5 | 7% Низкий | около 8 лет назад |
| BDU:2025-11250 Уязвимость методов addElement и addAttribute библиотеки для работы с XML, XPath и XSLT dom4j, позволяющая нарушителю проводить XXE-атаки | CVSS3: 7.5 | 7% Низкий | больше 8 лет назад |
 | ROS-20250822-02 Уязвимость dom4j | CVSS3: 7.5 | 7% Низкий | около 1 года назад |
Уязвимостей на страницу