Skip to main content

Drools

1 CVEs product

Monthly

CVE-2014-8125 Maven HIGH PATCH This Week

XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPMN2 file. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.

XXE Drools Jbpm
NVD GitHub
CVSS 2.0
7.5
EPSS
1.0%
EPSS 1% CVSS 7.5
HIGH PATCH This Week

XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPMN2 file. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.

XXE Drools Jbpm
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy