Lucene search
K

30 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/22 12:0 a.m.13 views

Unity Linux 20.1060e / 20.1070e Security Update: jdom2 (UTSA-2026-016676)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016676 advisory. An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. Tenable has extracted the preceding...

7.5CVSS6.8AI score0.19442EPSS
Exploits1References4
IBM Security Bulletins
IBM Security Bulletins
added 2025/08/07 3:20 a.m.4 views

Security Bulletin: Vulnerabilities in SAXBuilder affects IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Potential vulnerability in SAXBuilder has been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2021-33813 DESCRIPTION: An XX...

7.5CVSS6.1AI score0.19442EPSS
Exploits1Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/08 12:0 a.m.4 views

The vulnerability of the SAXBuilder tool for project management and information sharing in the JIRA system allows attackers to carry out XXE attacks.

The vulnerability of the SAXBuilder tool for project management and information sharing in the JIRA system is related to an error in restricting XML links to external objects. Exploiting this vulnerability could allow a malicious actor to carry out XXE attacks remotely...

7.7CVSS5.4AI score0.00343EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2024/05/30 2:30 p.m.8 views

SUSE-SU-2024:1871-1 Security update for jdom

This update for jdom fixes the following issues: - CVE-2021-33813: Fixed possible denial-of-service XXE issue in SAXBuilder via a crafted HTTP request bsc1187446...

7.5CVSS6.6AI score0.19442EPSS
Exploits1References4
IBM Security Bulletins
IBM Security Bulletins
added 2023/08/30 11:3 a.m.26 views

Security Bulletin: ITCAM for Transactions affected by the Security vulnerability CVE-2021-33813 found in jdom-1.0.jar

Summary IBM Tivoli Composite Application Manager ITCAM for Transactions - Transaction Tracking has addressed the following jdom-1.0.jar vulnerability and updated jdom.jar from version 1.0 to 2.0.6.1 Vulnerability Details CVEID:CVE-2021-33813 DESCRIPTION: JDOM is vulnerable to a denial of service,...

7.5CVSS7.4AI score0.19442EPSS
Exploits1Affected Software1
Amazon
Amazon
added 2023/03/22 12:0 a.m.2 views

Medium: jdom

Issue Overview: An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. CVE-2021-33813 Affected Packages: jdom Issue Correction: Run dnf update jdom --releasever 2023.0.20230322 or dnf update --advisory ALAS2023-2023-014...

7.5CVSS6.5AI score0.19442EPSS
Exploits1
SUSE CVE
SUSE CVE
added 2023/02/15 3:40 a.m.3 views

SUSE CVE-2021-33813

An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request...

7.5CVSS6.8AI score0.19442EPSS
Exploits1References13
Tenable Nessus
Tenable Nessus
added 2022/10/26 12:0 a.m.29 views

SUSE SLES15 Security Update : jdom (SUSE-SU-2022:3547-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3547-1 advisory. - CVE-2021-33813: Fixed XXE issue in SAXBuilder can cause a denial of service via a crafted HTTP request bsc1187446. Tenable has extracted t...

7.5CVSS6.8AI score0.19442EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2022/07/07 2:19 p.m.1 views

jdom: XXE allows attackers to cause a DoS via a crafted HTTP request

An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request...

7.5CVSS6.9AI score0.19442EPSS
Exploits1References4
IBM Security Bulletins
IBM Security Bulletins
added 2022/07/06 5:33 a.m.11 views

Security Bulletin: A security vulnerability has been identified in JDOM shipped with IBM Tivoli Netcool Impact (CVE-2021-33813)

Summary JDOM is shipped with IBM Tivoli Netcool Impact. Information about a security vulnerability affecting JDOM has been published in a security bulletin. Vulnerability Details CVEID: CVE-2021-33813 DESCRIPTION: JDOM is vulnerable to a denial of service, caused by an XXE issue in SAXBuilder. By...

7.5CVSS0.8AI score0.19442EPSS
Exploits1Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/06/22 12:0 a.m.46 views

EulerOS 2.0 SP8 : jdom (EulerOS-SA-2022-1933)

According to the versions of the jdom package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. CVE-2021-33813 Note that...

7.5CVSS6.5AI score0.19442EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2022/06/17 12:0 a.m.49 views

EulerOS 2.0 SP5 : jdom (EulerOS-SA-2022-1895)

According to the versions of the jdom package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. CVE-2021-33813 Note that...

7.5CVSS6.5AI score0.19442EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2022/03/29 1:16 p.m.0 views

jdom: XXE allows attackers to cause a DoS via a crafted HTTP request

An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request...

7.5CVSS6.9AI score0.19442EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2022/03/29 1:0 p.m.1 views

jdom: XXE allows attackers to cause a DoS via a crafted HTTP request

An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request...

7.5CVSS6.9AI score0.19442EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2022/03/23 8:22 a.m.2 views

jdom: XXE allows attackers to cause a DoS via a crafted HTTP request

An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request...

7.5CVSS6.9AI score0.19442EPSS
Exploits1References4
OSV
OSV
added 2021/07/27 7:2 p.m.2 views

GHSA-2363-CQG2-863C XML External Entity (XXE) Injection in JDOM

An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. As a workaround, to avoid external entities being expanded, one can call builder.setExpandEntitiesfalse and they won't be expanded...

7.5CVSS6.8AI score0.19442EPSS
Exploits1References22
Github Security Blog
Github Security Blog
added 2021/07/27 7:2 p.m.119 views

XML External Entity (XXE) Injection in JDOM

An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. As a workaround, to avoid external entities being expanded, one can call builder.setExpandEntitiesfalse and they won't be expanded...

7.5CVSS7.2AI score0.19442EPSS
Exploits1References22Affected Software2
Tenable Nessus
Tenable Nessus
added 2021/07/14 12:0 a.m.21 views

openSUSE 15 Security Update : jdom2 (openSUSE-SU-2021:1031-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1031-1 advisory. - An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. CVE-2021-33813 Note tha...

7.5CVSS6.5AI score0.19442EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2021/07/13 12:0 a.m.22 views

SUSE SLED15 / SLES15 Security Update : jdom2 (SUSE-SU-2021:2293-1)

The remote SUSE Linux SLED15 / SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2021:2293-1 advisory. - CVE-2021-33813: XXE issue in SAXBuilder can cause a denial of service via a crafted HTTP request bsc1187446 Tenable has extracted the precedi...

7.5CVSS6.8AI score0.19442EPSS
Exploits1References4
OPENSUSE Linux
OPENSUSE Linux
added 2021/07/13 12:0 a.m.57 views

Security update for jdom2 (important)

openSUSE Security Update: Security update for jdom2 Announcement ID: openSUSE-SU-2021:1031-1 Rating: important References: 1187446 Cross-References: CVE-2021-33813 CVSS scores: CVE-2021-33813 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-33813 SUSE: 7.5...

7.5CVSS6.7AI score0.19442EPSS
Exploits1References1
Rows per page
Query Builder