Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache jUDDI

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2018-1307

    Apache juddi-client vulnerable to XML External Entity (XXE)

    In Apache jUDDI 3.2 through 3.3.4, if using the WADL2Java or WSDL2Java classes, which parse a local or remote XML document and then mediates the data structures into UDDI data structures, there are little protections present against entity expansion and DTD t…

    Apache Software Foundation Apache jUDDI org.apache.juddi:juddi-client Maven