Skip to content

Product

org.apache.karaf.specs/org.apache.karaf.specs.java.xml vulnerabilities

1 published CVE affecting org.apache.karaf.specs/org.apache.karaf.specs.java.xml, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest org.apache.karaf.specs/org.apache.karaf.specs.java.xml CVEs

Newest publication first

  1. CVE-2018-11788 XML External Entity Reference in Apache Karaf

    Published
    CriticalCVSS 9.8

    Apache Karaf provides a features deployer, which allows users to "hot deploy" a features XML by dropping the file directly in the deploy folder. The features XML is parsed by XMLInputFactory class. Apache Karaf XMLInputFactory class doesn't contain any mitigation codes against XX...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.