Skip to main content

Drools

1 CVEs product

Monthly

CVE-2014-8125 Apr 21, 17:59 Maven HIGH PATCH This Week

XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPMN2 file. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.

XXE Red Hat Jbpm Drools
NVD GitHub
CVSS 2.0
7.5
EPSS
1.0%
EPSS 1% CVSS 7.5
HIGH PATCH This Week

XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPMN2 file. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.

XXE Red Hat Jbpm +1
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy