CVE-2018-11761
19.09.2018, 14:29
In Apache Tika 0.1 to 1.18, the XML parsers were not configured to limit entity expansion. They were therefore vulnerable to an entity expansion vulnerability which can lead to a denial of service attack.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apache | tika | 0.1 ≤ 𝑥 ≤ 1.18 |
| oracle | business_process_management_suite | 12.1.3.0.0 |
| oracle | business_process_management_suite | 12.2.1.3.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
References