Lucene search

K
cvelistRedhatCVELIST:CVE-2016-5002
HistoryOct 27, 2017 - 6:00 p.m.

CVE-2016-5002

2017-10-2718:00:00
redhat
www.cve.org
7

AI Score

8.3

Confidence

High

EPSS

0.003

Percentile

70.7%

XML external entity (XXE) vulnerability in the Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted DTD.

AI Score

8.3

Confidence

High

EPSS

0.003

Percentile

70.7%