CVE-2017-7503

CVE-2017-7503 affects Red Hat JBoss EAP 7.0.5 where javax.xml.transform.TransformerFactory is vulnerable to XXE, enabling DoS/SSRF and local file disclosure. The issue is caused by the TransformerFactory implementation in EAP 7.0.5 and is tied to the XSL/XML processing path. In the linked advisor...

CVE-2014-7503

CVE-2014-7503 entry is rejected/not used and does not represent an active vulnerability record.

CVE-2017-7492

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-7503. Reason: This candidate is a reservation duplicate of CVE-2017-7503. Notes: All CVE users should reference CVE-2017-7503 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Fedora Update for php-ZendFramework2 FEDORA-2016-03c0ed3127

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated php-ZendFramework2 packages fix CVE-2015-7503

Updated php-ZendFramework2 packages fix security vulnerability: Zend\Crypt\PublicKey\Rsa\PublicKey has a call to opensslpublicencrypt which uses PHP's default $padding argument, which specifies OPENSSLPKCS1PADDING, indicating usage of PKCS1v1.5 padding. This padding has a known vulnerability, the...

Unfixed XSS vulnerability at edu.ru

Security researcher MEFISTO, has submitted on 28/08/2007 a cross-site-scripting XSS vulnerability affecting edu.ru, which at the time of submission ranked 7503 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/08/2007. It is currently unfixed...

CVE-2017-7492

CVE-2017-7492 is a reservation duplicate of CVE-2017-7503 (reference: CVE-2017-7503). The connected data confirm that the Red Hat JBoss EAP 7.0.5 TransformerFactory is vulnerable to XXE, enabling DoS/SSRF or local file access. Red Hat advisories link to CVE-2017-7503 as the relevant fix, and down...