CVE-2015-1832

ADVISORY - github

Summary

XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via vectors involving XmlVTI and the XML datatype.

EPSS Score⁠: 0.12173 (0.956)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-399⁠

Resource Management Errors

CWE-611⁠

Improper Restriction of XML External Entity Reference

ADVISORY - github

CWE-611⁠

Improper Restriction of XML External Entity Reference

ADVISORY - gitlab

CWE-1035⁠

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

CWE-399⁠

Resource Management Errors

CWE-611⁠

Improper Restriction of XML External Entity Reference

CWE-937⁠

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

ADVISORY - redhat

CWE-611⁠

Improper Restriction of XML External Entity Reference

Impacted images

Advisories

NIST

CREATED

10 years ago

UPDATED

9 days ago

ADVISORY IDCVE-2015-1832⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)

CWE-399⁠CWE-611⁠

CVSS SCORE

9.1critical

GitHub

CREATED

4 years ago

UPDATED

4 years ago

ADVISORY IDGHSA-wr69-g62g-2r9h⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)

CVSS SCORE

9.1critical

Debian

CREATED

10 years ago

UPDATED

2 months ago

ADVISORY IDCVE-2015-1832⁠

EXPLOITABILITY SCORE

-

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

10 years ago

UPDATED

1 year ago

ADVISORY IDCVE-2015-1832⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

9.1medium

GitLab

CREATED

10 years ago

UPDATED

7 years ago

ADVISORY ID

CVE-2015-1832

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)

CWE-1035⁠CWE-399⁠CWE-611⁠CWE-937⁠

CVSS SCORE

9.1critical

Red Hat

CREATED

11 years ago

UPDATED

1 year ago

ADVISORY IDCVE-2015-1832⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)

CVSS SCORE

6.5medium