CVE-2017-15691

CVE-2017-15691 is a XML External Entity (XXE) vulnerability affecting Apache UIMA families (uimaj, uimaj-core, uima-as, uimaFIT, uimaj DUCC) where XXE capability in various XML parsers may lead to disclosure of local/internal files. Affected versions include Apache uimaj prior to 2.10.2, Apache u...

CVE-2017-15691

In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion XXE capability of various XML parsers. UIMA as part of its...