Skip to content

Vendor

org.apache.karaf.specs vulnerabilities

1 published CVE affecting org.apache.karaf.specs, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of org.apache.karaf.specs alerts

Products

Latest org.apache.karaf.specs CVEs

Newest publication first

  1. CVE-2018-11788 XML External Entity Reference in Apache Karaf

    Published
    CriticalCVSS 9.8 EPSS 7.3%

    Apache Karaf provides a features deployer, which allows users to "hot deploy" a features XML by dropping the file directly in the deploy folder. The features XML is parsed by XMLInputFactory class. Apache Karaf XMLInputFactory class doesn't contain any mitigation codes against XX...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.