CVE-2026-119724

A flaw was found in Apache jclouds. The XML parser does not properly restrict recursive entity references within Document Type Definitions DTDs. By submitting a specially crafted XML document containing recursive entity definitions, a remote attacker could consume excessive memory and CPU...

CVE-2026-119724

UNSUPPORTED WHEN ASSIGNED Improper restriction of recursive entity references in DTDs 'XML entity expansion' vulnerability in Apache JClouds. This issue affects Apache JClouds: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommend...

CVE-2026-119724 Apache JClouds: XML External Entity (XXE) in provider-response parsing

UNSUPPORTED WHEN ASSIGNED Improper restriction of recursive entity references in DTDs 'XML entity expansion' vulnerability in Apache JClouds. This issue affects Apache JClouds: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommend...

CVE-2026-119724

A flaw in Apache JClouds (all versions) allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML document. The root cause is the improper restriction of recursive entity references within Document Type Definitions (DTDs), which can lead to excessive consum...

EUVD-2026-115730

UNSUPPORTED WHEN ASSIGNED Improper restriction of recursive entity references in DTDs 'XML entity expansion' vulnerability in Apache JClouds. This issue affects Apache JClouds: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommend...

CVE-2026-119724: Apache Software Foundation Apache JClouds: ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion')…

UNSUPPORTED WHEN ASSIGNED Improper restriction of recursive entity references in DTDs 'XML entity expansion' vulnerability in Apache JClouds. This issue affects Apache JClouds: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommend...

PT-2026-136064

UNSUPPORTED WHEN ASSIGNED Improper restriction of recursive entity references in DTDs 'XML entity expansion' vulnerability in Apache JClouds. This issue affects Apache JClouds: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommend...

Apache jclouds 2.7.0 XML External Entity (XXE) Injection

Summary Apache jclouds is an open source multi-cloud toolkit for the Java platform that gives you the freedom to create applications that are portable across clouds while giving you full control to use cloud-specific features. The jclouds API gives you the freedom to use portable abstractions or...

Apache jclouds 2.7.0 XML External Entity Injection

Apache jclouds version 2.7.0 contains an XML External Entity injection vulnerability in provider-response parsing that may allow local file disclosure or server-side request forgery when a parsed endpoint is attacker controlled. !/usr/bin/env bash Apache jclouds 2.7.0 XML External Entity XXE...

Incorrect Mapping Of Security Rules

Apache jclouds incorrectly maps the security rules. The vulnerability exists because it arbitrarily assigns security access to any security group found first in the find, leading to incorrect assigning the security rules...