Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline

CVE-2018-1000632

🗓️ 20 Aug 2018 19:31:31Reported by [email protected]Type 
nvd
 nvd🔗 web.nvd.nist.gov👁 12 Views

dom4j version prior to 2.1.1 contains XML Injection vulnerabilit

Show more

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Related
Detection
Refs
ReporterTitlePublishedViews
Family
SUSE Linux		Security update for dom4j (moderate)
8 Dec 201800:22
–suse
SUSE Linux		Security update for dom4j (moderate)
28 Sep 201812:13
–suse
SUSE Linux		Security update for dom4j (moderate)
7 Dec 201812:12
–suse
Prion		Input validation
20 Aug 201819:31
–prion
IBM Security Bulletins		Security Bulletin: IBM Security Verify Governance is vulnerable to arbitrary code execution due to use of dom4j (CVE-2018-1000632)
21 Nov 202212:41
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerability found in dom4j-1.6.1.jar which is shipped with IBM® Intelligent Operations Center(CVE-2018-1000632)
5 Sep 202312:33
–ibm
IBM Security Bulletins		Security Bulletin: Dom4j Vulnerability affects IBM SPSS Statistics (CVE-2018-1000632)
13 Sep 202220:08
–ibm
IBM Security Bulletins		Security Bulletin: ITCAM for Transactions affected by the Security vulnerability CVE-2018-1000632 found in dom4j-1.6.1.jar
30 Aug 202311:05
–ibm
IBM Security Bulletins		Security Bulletin: dom4j Vulnerability in Apache Solr shipped with IBM Operations Analytics - Log Analysis Analysis (CVE-2018-1000632)
16 Apr 202106:03
–ibm
IBM Security Bulletins		Security Bulletin: IBM Spectrum Control is vulnerable to weakness related to dom4j
3 Mar 202305:55
–ibm
Rows per page
Nvd
Node
dom4j_projectdom4jRange2.0.0–2.0.3
OR
dom4j_projectdom4jRange2.1.0–2.1.1
Node
debiandebian_linuxMatch8.0
Node
oracleflexcube_investor_servicingMatch12.0.4
OR
oracleflexcube_investor_servicingMatch12.1.0
OR
oracleflexcube_investor_servicingMatch12.3.0
OR
oracleflexcube_investor_servicingMatch12.4.0
OR
oracleflexcube_investor_servicingMatch14.0.0
OR
oracleprimavera_p6_enterprise_project_portfolio_managementRange16.1.0.0–16.2.20.1
OR
oracleprimavera_p6_enterprise_project_portfolio_managementRange17.1.0.0–17.12.17.1
OR
oracleprimavera_p6_enterprise_project_portfolio_managementRange18.1.0.0–18.8.19.0
OR
oracleprimavera_p6_enterprise_project_portfolio_managementRange19.12.0.0–19.12.6.0
OR
oraclerapid_planningMatch12.1
OR
oraclerapid_planningMatch12.2
OR
oracleretail_integration_busMatch15.0
OR
oracleretail_integration_busMatch16.0
OR
oracleutilities_frameworkRange4.3.0.2.0–4.3.0.6.0
OR
oracleutilities_frameworkMatch2.2.0
OR
oracleutilities_frameworkMatch4.2.0.2.0
OR
oracleutilities_frameworkMatch4.2.0.3.0
OR
oracleutilities_frameworkMatch4.4.0.0.0
OR
oracleutilities_frameworkMatch4.4.0.2
Node
redhatsatelliteMatch6.6
OR
redhatsatellite_capsuleMatch6.6
Node
redhatjboss_enterprise_application_platformMatch6.0.0
OR
redhatjboss_enterprise_application_platformMatch6.4.0
OR
redhatjboss_enterprise_application_platformMatch7.1.0
AND
redhatenterprise_linuxMatch6.0
OR
redhatenterprise_linuxMatch7.0
Node
redhatjboss_enterprise_application_platformMatch6.0.0
OR
redhatjboss_enterprise_application_platformMatch6.4.0
AND
redhatenterprise_linuxMatch5.0
Node
netapponcommand_workflow_automationMatch-
OR
netappsnap_creator_frameworkMatch-
OR
netappsnapcenterMatch-
OR
netappsnapmanagerMatch-oracle
OR
netappsnapmanagerMatch-sap

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
20 Aug 2018 19:31Current
7.9High risk
Vulners AI Score7.9
CVSS25
CVSS37.5
EPSS0.01202
CWE-91
dom4jxml injectionvulnerabilitycwe-91cve-2018-1000632
12
.json
Report