Поиск уязвимостей
Количество 12
Количество 12
GHSA-6pcc-3rfx-4gpm
Dom4j contains a XML Injection vulnerability
CVE-2018-1000632
dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.
CVE-2018-1000632
dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.
CVE-2018-1000632
dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.
CVE-2018-1000632
dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection ...
openSUSE-SU-2018:3998-1
Security update for dom4j
openSUSE-SU-2018:2931-1
Security update for dom4j
SUSE-SU-2018:3908-1
Security update for dom4j
SUSE-SU-2018:3424-1
Security update for dom4j
BDU:2025-11250
Уязвимость методов addElement и addAttribute библиотеки для работы с XML, XPath и XSLT dom4j, позволяющая нарушителю проводить XXE-атаки
ROS-20250822-02
Уязвимость dom4j
ALT-PU-2021-4984
ALT-PU-2021-4984: package `dom4j` update to version 2.0.3-alt1_1jpp11
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-6pcc-3rfx-4gpm Dom4j contains a XML Injection vulnerability | CVSS3: 7.5 | 7% Низкий | около 8 лет назад |
 | CVE-2018-1000632 dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later. | CVSS3: 7.5 | 7% Низкий | около 8 лет назад |
 | CVE-2018-1000632 dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later. | CVSS3: 5.3 | 7% Низкий | больше 8 лет назад |
 | CVE-2018-1000632 dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later. | CVSS3: 7.5 | 7% Низкий | около 8 лет назад |
| CVE-2018-1000632 dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection ... | CVSS3: 7.5 | 7% Низкий | около 8 лет назад |
 | openSUSE-SU-2018:3998-1 Security update for dom4j | 7% Низкий | почти 8 лет назад | |
| openSUSE-SU-2018:2931-1 Security update for dom4j | 7% Низкий | около 8 лет назад | |
| SUSE-SU-2018:3908-1 Security update for dom4j | 7% Низкий | около 8 лет назад | |
| SUSE-SU-2018:3424-1 Security update for dom4j | 7% Низкий | около 8 лет назад | |
 | BDU:2025-11250 Уязвимость методов addElement и addAttribute библиотеки для работы с XML, XPath и XSLT dom4j, позволяющая нарушителю проводить XXE-атаки | CVSS3: 7.5 | 7% Низкий | больше 8 лет назад |
 | ROS-20250822-02 Уязвимость dom4j | CVSS3: 7.5 | 7% Низкий | около 1 года назад |
| ALT-PU-2021-4984 ALT-PU-2021-4984: package `dom4j` update to version 2.0.3-alt1_1jpp11 | CVSS3: 9.8 | больше 5 лет назад |
Уязвимостей на страницу