CVE-2017-7465

It was found that the JAXP implementation used in JBoss EAP 7.0 for XSLT processing is vulnerable to code injection. An attacker could use this flaw to cause remote code execution if they are able to provide XSLT content for parsing. Doing a transform in JAXP requires the use of a...

PT-2017-17776

Name of the Vulnerable Software and Affected Versions Red Hat JBoss EAP version 7.0.5 Description The issue is related to the implementation of javax.xml.transform.TransformerFactory in Red Hat JBoss EAP, which is vulnerable to XML External Entity XXE attacks. This could allow an attacker to laun...

CVE-2017-7503: Improper Restriction of XML External Entity Reference

It was found that the Red Hat JBoss EAP 7.0.5 implementation of javax.xml.transform.TransformerFactory is vulnerable to XXE. An attacker could use this flaw to launch DoS or SSRF attacks, or read files from the server where EAP is deployed...