Linux Distros Unpatched Vulnerability : CVE-2014-0119

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT...

CVE-2014-0119

creationtimestamp| type| source ---|---|--- 2025-02-18 15:34:33+00:00| seen| https://gist.github.com/jpmartins-ca/4200d476e327a22a046f19199e252871...

K15429: Apache Tomcat vulnerability CVE-2014-0119

Security Advisory Description Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to 1 read arbitrary files via a crafted web application that...

com.amazonaws:aws-dynamodb-session-tomcat (2.0.4), de.javakaffee.msm:memcached-session-manager-tc8 (>=1.8.2, <=1.9.0-rc1) +5 more potentially affected by CVE-2014-0119 via org.apache.tomcat:tomcat-catalina (>=8.0.1, <=8.0.5)

org.apache.tomcat:tomcat-catalina MAVEN version =8.0.1, =1.8.2, =8.0.1, =8.0.1, =8.0.1, =0.7, =3.5.0, =3.5.1 Source cves: CVE-2014-0119 Source advisory: GHSA-PRC3-7F44-W48J...

com.amazonaws:aws-dynamodb-session-tomcat (2.0.4), de.javakaffee.msm:memcached-session-manager-tc8 (>=1.8.2, <=1.9.0-rc1) +5 more potentially affected by CVE-2014-0119 via org.apache.tomcat:tomcat-catalina (>=8.0.1, <=8.0.5)

org.apache.tomcat:tomcat-catalina MAVEN version =8.0.1, =1.8.2, =8.0.1, =8.0.1, =8.0.1, =0.7, =3.5.0, =3.5.1 Source cves: CVE-2014-0119 Source advisory: OSV:GHSA-PRC3-7F44-W48J...

org.apache.openejb:apache-tomee (>=1.5.2, <=1.6.0.2), org.apache.openejb:arquillian-tomee-codi-tests (>=1.5.2, <=1.6.0.2) +9 more potentially affected by CVE-2014-0119 via org.apache.tomcat:tomcat (>=7.0.37, <=7.0.53)

org.apache.tomcat:tomcat MAVEN version =7.0.37, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =4.5.2, =5.16.3, =5.19.9 Source cves: CVE-2014-0119 Source advisory: GHSA-PRC3-7F44-W48J...

org.apache.openejb:apache-tomee (>=1.5.2, <=1.6.0.2), org.apache.openejb:arquillian-tomee-codi-tests (>=1.5.2, <=1.6.0.2) +9 more potentially affected by CVE-2014-0119 via org.apache.tomcat:tomcat (>=7.0.37, <=7.0.53)

org.apache.tomcat:tomcat MAVEN version =7.0.37, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =4.5.2, =5.16.3, =5.19.9 Source cves: CVE-2014-0119 Source advisory: OSV:GHSA-PRC3-7F44-W48J...

de.javakaffee.msm:memcached-session-manager-tc8 (>=1.8.2, <=1.9.0-rc1) potentially affected by CVE-2014-0119 via org.apache.tomcat:tomcat-jasper (8.0.5)

org.apache.tomcat:tomcat-jasper MAVEN version 8.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-jasper and may be impacted: - de.javakaffee.msm:memcached-session-manager-tc8 =1.8.2, =1.9.0-rc1 Source cves: CVE-2014-0119...

br.com.caelum.vraptor:vraptor-test (>=2.0.0, <=4.0.0), com.brienwheeler.apps:apps-tomcat (>=1.0-release, <=1.08) +60 more potentially affected by CVE-2014-0119 via org.apache.tomcat:tomcat-jasper (>=7.0.0, <=7.0.53)

org.apache.tomcat:tomcat-jasper MAVEN version =7.0.0, =2.0.0, =1.0-release, =1.0-release, =0.1, =0.4, =7.0.22, =1.0, =1.0.0, =1.0.0, =1.8.0, =1.0.0, =0.1.2, =0.3.3 and more Source cves: CVE-2014-0119 Source advisory: GHSA-PRC3-7F44-W48J...

br.com.caelum.vraptor:vraptor-test (>=2.0.0, <=4.0.0), com.brienwheeler.apps:apps-tomcat (>=1.0-release, <=1.08) +60 more potentially affected by CVE-2014-0119 via org.apache.tomcat:tomcat-jasper (>=7.0.0, <=7.0.53)

org.apache.tomcat:tomcat-jasper MAVEN version =7.0.0, =2.0.0, =1.0-release, =1.0-release, =0.1, =0.4, =7.0.22, =1.0, =1.0.0, =1.0.0, =1.8.0, =1.0.0, =0.1.2, =0.3.3 and more Source cves: CVE-2014-0119 Source advisory: OSV:GHSA-PRC3-7F44-W48J...

SUSE: Security Advisory (SUSE-SU-2014:1015-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Security vulnerabilities in Apache Tomcat in Rational DOORS Web Access

Summary The Apache Tomcat application server in installations of IBM Rational DOORS Web Access version contains security vulnerabilities. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information...

Security Bulletin: Apache Tomcat Vulnerabilities in IBM UrbanCode Release (CVE-2014-0075,CVE-2014-0095,CVE-2014-0096,CVE-2014-0099,CVE-2014-0119)

Summary Previous releases of IBM UrbanCode Release are affected by vulnerabilities in Apache Tomcat that may allow remote attackers to influence the availability of the server or obtain sensitive information. Vulnerability Details | Subscribe to My Notifications to be notified of important produc...

Security Bulletin: Vulnerabilities in tomcat affect IBM SmartCloud Provisioning 2.1 for Software Virtual Appliance (CVE-2013-4590, CVE-2014-0119)

Summary Vulnerabilities in tomcat6 packages affect IBM SmartCloud Provisioning 2.1 for Provided Software Virtual Appliance CVE-2013-4590, CVE-2014-0119. Vulnerability Details CVEID: CVE-2013-4590 DESCRIPTION: Apache Tomcat could allow a remote attacker to obtain sensitive information, caused by a...

Security Bulletin: Rational Test Control Panel in Rational Test Workbench and Rational Test Virtualization Server affected by Apache Tomcat vulnerablity (CVE-2014-0075, CVE-2014-0096, CVE-2014-0099, CVE-2014-0119)

Summary Apache Tomcat is vulnerable to a number of security issues affecting the Rational Test Control Panel component in IBM Rational Test Workbench and Rational Test Virtualization Server. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts...

Security Bulletin: Security vulnerabilities in Apache Tomcat for WebSphere Application Server Community Edition 2.1.1.6 and 3.0.0.4（CVE-2014-0075, CVE-2014-0096 and CVE-2014-0119）

Summary Security vulnerabilities exist in Apache Tomcat May 2014 X-Force Report that is shipped with IBM WebSphere Application Server Community Edition 2.1.1.6 and 3.0.0.4 Vulnerability Details CVE ID: CVE-2014-0075 DESCRIPTION: Apache Tomcat is vulnerable to a denial of service, caused by the...

[SECURITY] [DSA 3552-1] tomcat7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3552-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 17, 2016 https://www.debian.org/security/faq -...

Debian DSA-3530-1 : tomcat6 - security update

Multiple security vulnerabilities have been fixed in the Tomcat servlet and JSP engine, which may result on bypass of security manager restrictions, information disclosure, denial of service or session fixation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Oracle: Security Advisory (ELSA-2014-1034)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: Red Hat JBoss Data Virtualization 6.0.0 security update

Red Hat JBoss Data Virtualization 6.0.0 2015 roll up patch 1, which fixes multiple security issues and various bugs, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base...