CVE-2014-3643 jersey: XXE via parameter entities
HighCVSS 7.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
jersey: XXE via parameter entities not disabled by the jersey SAX parser
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| com.sun.jersey/jersey-core(Maven) | < 1.13 | 1.13 |
| com.sun.jersey/jersey-core(Maven) | = 0.9-ea | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.0 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.0.1 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.0.2 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.0.3 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.0.3.1 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.1.0-ea | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.1.1-ea | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.1.2-ea | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.1.3-ea | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.1.4 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.1.4.1 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.1.5 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.1.5-ea-20100104 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.1.5-ea-v20091019 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.1.5.1 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.1.5.2 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.10 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.10-b01 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.10-b02 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.10-b03 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.10-b04 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.10-b05 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.11 | No fix listed |
Show 58 more
| Product | Affected versions | Fixed in |
|---|---|---|
| com.sun.jersey/jersey-core(Maven) | = 1.11-b01 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.11-b02 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.11-b03 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.11-b04 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.11.1 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.11.2 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.12 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.12-b01 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.13-b01 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.2 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.3 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.4 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.4-ea01 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.4-ea02 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.4-ea03 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.4-ea04 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.4-ea05 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.4-ea06 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.5 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.5-ea01 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.5-ea02 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.5-ea03 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.5-ea04 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.5-ea05 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.5-ea06 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.5-ea07 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.5-ea08 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.5-ea09 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.6 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.6-ea01 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.6-ea02 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.6-ea03 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.6-ea04 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.6-ea05 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.6-ea06 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.7 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.7-ea01 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.7-ea02 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.7-ea03 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.7-ea04 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.7-ea05 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.7-ea06 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.7-ea07 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.8 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.8-ea01 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.8-ea02 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.8-ea03 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.8-ea04 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.9 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.9-ea01 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.9-ea02 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.9-ea03 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.9-ea04 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.9-ea06 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.9-ea07 | No fix listed |
| com.sun.jersey/jersey-core(Maven) | = 1.9.1 | No fix listed |
| jersey project jersey | All versions | No fix listed |
| jersey | = through 2014-09-17 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- Red Hat third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- github.com product
- www.oracle.com
- www.sourceclear.com
- github.com