Product

org.apache.uima/uimafit-core vulnerabilities

1 published CVE affecting org.apache.uima/uimafit-core, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest org.apache.uima/uimafit-core CVEs

Newest publication first

CVE-2017-15691 Improper Restriction of XML External Entity Reference in Apache uimaj
Published 2018-04-26

MediumCVSS 6.5 EPSS 8.9%

In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion (XXE) capability of various XML parsers. UIMA...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

org.apache.uima/uimafit-core vulnerabilities

Latest org.apache.uima/uimafit-core CVEs

CVE-2017-15691 Improper Restriction of XML External Entity Reference in Apache uimaj