Skip to content
OpenAdvisories
Unscored CVE-2015-1818 EUVD-2015-1940GHSA-c64m-pjpp-mqqj

XML external entity (XXE) vulnerability in the dashbuilder import facility (DocumentBuilders in org.jboss.dashboard.export.ImportManagerImp…

Published Aug 11, 2015 · Updated Aug 6, 2024 · Assigned by redhat

Description

XML external entity (XXE) vulnerability in the dashbuilder import facility (DocumentBuilders in org.jboss.dashboard.export.ImportManagerImpl) in Red Hat JBoss BPM Suite before 6.1.2 allows remote attackers to read arbitrary files, conduct server-side request forgery (SSRF) attacks, and have other unspecified impact via a crafted XML document.

References