CVE-2017-7464: XEE
Published Jul 27, 2018
·Updated
It was found that the JAXP implementation used in JBoss EAP 7.0 for SAX and DOM parsing is vulnerable to certain XXE flaws. An attacker could use this flaw to cause DoS, SSRF, or information disclosure if they are able to provide XML content for parsing.
Affected Software
1 affected component
redhat JBoss Enterprise Application Platform=7.0
Event History
Jul 27, 2018
CVE Published
via MITRE·12:00 PM
Data Sourced
via MITRE·12:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-7464?
CVE-2017-7464 is considered significant due to its potential for DoS, SSRF, or information disclosure.
2
How do I fix CVE-2017-7464?
To fix CVE-2017-7464, update to a patched version of JBoss EAP that addresses the XXE vulnerabilities.
3
What types of attacks can CVE-2017-7464 facilitate?
CVE-2017-7464 can facilitate DoS, SSRF, and information disclosure attacks.
4
Which software versions are affected by CVE-2017-7464?
CVE-2017-7464 affects JBoss EAP version 7.0.
5
What does XXE mean in the context of CVE-2017-7464?
XXE stands for XML External Entity, a vulnerability that can lead to security breaches through XML input processing.