Количество 8
Количество 8
CVE-2014-0096
java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly restrict XSLT stylesheets, which allows remote attackers to bypass security-manager restrictions and read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVE-2014-0096
java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly restrict XSLT stylesheets, which allows remote attackers to bypass security-manager restrictions and read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVE-2014-0096
java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly restrict XSLT stylesheets, which allows remote attackers to bypass security-manager restrictions and read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVE-2014-0096
java/org/apache/catalina/servlets/DefaultServlet.java in the default s ...
GHSA-qprx-q2r7-3rx6
Improper Input Validation in Apache Tomcat
BDU:2015-00406
Уязвимость программного обеспечения Apache Tomcat, позволяющая удаленному злоумышленнику нарушить конфиденциальность защищаемой информации
ELSA-2014-0865
ELSA-2014-0865: tomcat6 security and bug fix update (MODERATE)
ELSA-2014-0827
ELSA-2014-0827: tomcat security update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2014-0096 java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly restrict XSLT stylesheets, which allows remote attackers to bypass security-manager restrictions and read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. | CVSS2: 4.3 | 2% Низкий | около 11 лет назад |
 | CVE-2014-0096 java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly restrict XSLT stylesheets, which allows remote attackers to bypass security-manager restrictions and read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. | CVSS2: 2.1 | 2% Низкий | около 11 лет назад |
 | CVE-2014-0096 java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly restrict XSLT stylesheets, which allows remote attackers to bypass security-manager restrictions and read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. | CVSS2: 4.3 | 2% Низкий | около 11 лет назад |
| CVE-2014-0096 java/org/apache/catalina/servlets/DefaultServlet.java in the default s ... | CVSS2: 4.3 | 2% Низкий | около 11 лет назад |
| GHSA-qprx-q2r7-3rx6 Improper Input Validation in Apache Tomcat | 2% Низкий | около 3 лет назад | |
 | BDU:2015-00406 Уязвимость программного обеспечения Apache Tomcat, позволяющая удаленному злоумышленнику нарушить конфиденциальность защищаемой информации | CVSS2: 4.3 | 2% Низкий | около 11 лет назад |
| ELSA-2014-0865 ELSA-2014-0865: tomcat6 security and bug fix update (MODERATE) | почти 11 лет назад | ||
| ELSA-2014-0827 ELSA-2014-0827: tomcat security update (MODERATE) | почти 11 лет назад |
Уязвимостей на страницу