CVE-2016-8739

🗓️ 21 Dec 2016 14:47:35Reported by redhat.comType

redhatcve

redhatcve🔗 access.redhat.com👁 38 Views

Apache CXF JAX-RS implementation XXE ris

Reporter	Title	Published	Views	Family All 21
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in the Apache CXF component of IBM Tivoli Network Manager IP Edition (CVE-2016-6812, CVE-2016-8739)	17 Jun 201815:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Rational Design Manager	23 Oct 201816:30	–	ibm
IBM Security Bulletins	Security Bulletin: Mulitiple security vulnerabilities in Apache CXF affects IBM InfoSphere Master Data Management (CVE-2016-6812 CVE-2016-8739 CVE-2017-5653 CVE-2017-5656 CVE-2017-3156)	16 Jun 201814:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerabilities	27 May 202008:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerability	19 Jul 201916:20	–	ibm
CNVD	Apache CXF JAX-RS XML External Entity Injection Vulnerability	24 May 201700:00	–	cnvd
CVE	CVE-2016-8739	10 Aug 201718:00	–	cve
Cvelist	CVE-2016-8739	10 Aug 201718:00	–	cvelist
EUVD	EUVD-2022-5744	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 25 Update: cxf-3.1.6-3.fc25	31 Dec 201606:51	–	fedora

Source	Link
cxf	www.cxf.apache.org/security-advisories.data/CVE-2016-8739.txt.asc
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

08 Nov 2021 23:47Current

4.6Medium risk

Vulners AI Score4.6

CVSS 36.5 - 7.5

CVSS 27.8

EPSS0.02672

apache cxf jax-rs xxe risk atom feeds xml entities apache abdera parser