CVE-2014-0171

XML external entity XXE vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint...

PT-2015-3598

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Data Virtualization versions prior to 6.0.0 patch 4 Description The issue allows remote attackers to read arbitrary files via a crafted request to a REST endpoint, specifically due to an XML external entity XXE vulnerability in...