Lucene search

K
cvelistRedhatCVELIST:CVE-2015-3192
HistoryJul 12, 2016 - 7:00 p.m.

CVE-2015-3192

2016-07-1219:00:00
redhat
www.cve.org

5.4 Medium

AI Score

Confidence

High

0.03 Low

EPSS

Percentile

91.0%

Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service (memory consumption and out-of-memory errors) via a crafted XML file.

5.4 Medium

AI Score

Confidence

High

0.03 Low

EPSS

Percentile

91.0%