CVE-2015-8031 Hudson XML API susceptible to External Entity Injection Vunerability prior to v3.3.2
CriticalCVSS 9.8
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Hudson (aka org.jvnet.hudson.main:hudson-core) before 3.3.2 allows XXE attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.jvnet.hudson.main/hudson-core(Maven) | < 3.3.2 | 3.3.2 |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.100 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.101 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.102 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.103 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.104 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.105 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.106 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.107 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.108 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.109 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.110 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.111 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.112 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.113 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.114 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.115 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.116 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.117 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.118 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.119 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.120 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.121 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.122 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.123 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.124 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.125 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.126 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.127 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.128 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.129 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.130 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.131 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.132 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.133 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.134 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.135 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.136 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.137 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.138 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.139 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.140 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.141 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.142 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.143 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.144 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.145 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.146 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.147 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.148 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.149 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.150 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.151 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.152 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.153 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.154 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.155 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.156 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.157 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.158 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.159 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.160 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.161 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.162 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.163 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.164 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.165 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.166 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.167 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.168 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.169 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.170 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.171 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.172 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.173 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.174 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.175 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.176 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.177 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.178 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.179 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.180 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.181 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.182 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.183 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.184 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.185 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.186 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.187 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.188 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.189 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.190 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.191 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.192 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.193 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.194 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.195 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.196 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.197 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.198 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.199 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.200 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.201 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.202 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.203 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.204 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.205 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.206 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.207 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.208 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.209 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.210 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.211 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.212 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.213 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.214 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.215 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.216 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.217 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.218 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.219 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.220 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.221 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.222 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.223 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.224 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.225 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.226 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.227 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.228 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.229 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.230 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.231 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.232 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.233 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.234 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.235 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.236 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.237 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.238 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.239 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.240 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.241 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.242 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.243 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.244 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.245 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.247 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.248 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.249 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.250 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.251 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.252 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.253 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.254 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.255 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.256 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.257 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.258 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.259 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.260 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.261 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.262 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.263 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.264 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.265 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.266 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.267 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.268 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.269 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.270 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.271 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.272 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.273 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.274 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.275 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.276 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.277 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.278 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.279 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.280 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.281 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.282 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.283 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.284 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.285 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.286 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.287 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.288 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.289 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.290 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.291 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.292 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.293 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.294 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.295 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.296 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.297 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.299 | No fix listed |
| org.jvnet.hudson.main/hudson-core(Maven) | = 1.300 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- wiki.eclipse.org vendor-advisory
- github.com exploit third-party-advisory vendor-advisory
- security.snyk.io exploit third-party-advisory
- github.com product