CVE-2015-1832
03.10.2016, 21:59
XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via vectors involving XmlVTI and the XML datatype.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apache | derby | 10.1.1.0 |
| apache | derby | 10.1.2.1 |
| apache | derby | 10.1.3.1 |
| apache | derby | 10.2.1.6 |
| apache | derby | 10.2.2.0 |
| apache | derby | 10.3.3.0 |
| apache | derby | 10.4.1.3 |
| apache | derby | 10.4.2.0 |
| apache | derby | 10.5.1.1 |
| apache | derby | 10.5.3.0 |
| apache | derby | 10.6.1.0 |
| apache | derby | 10.6.2.1 |
| apache | derby | 10.7.1.1 |
| apache | derby | 10.8.1.2 |
| apache | derby | 10.8.2.2 |
| apache | derby | 10.8.3.0 |
| apache | derby | 10.9.1.0 |
| apache | derby | 10.10.1.1 |
| apache | derby | 10.10.2.0 |
| apache | derby | 10.11.1.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| derby |
|
Common Weakness Enumeration
References