Lucene search
RootSSV:61951HistoryMar 27, 2014 - 12:00 a.m.
Apache Xalan-Java FEATURE_SECURE_PROCESSIN属性处理安全绕过漏洞
2014-03-2700:00:00
Root
www.seebug.org
26
0.005 Low
EPSS
Percentile
74.8%
CVE ID:CVE-2014-0107
Apache Xalan-Java是一个使用Java和C++来实现XSLT库的项目。
Apache Xalan-Java处理部分输出属性时存在错误，允许攻击者利用漏洞绕过安全处理特性(FEATURE_SECURE_PROCESSING)，可访问受限属性或加载任意受限类。
0
Apache Xalan-Java 2.7.0
用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞：
https://issues.apache.org/jira/browse/XALANJ-2435
Related
fedora
fedora
[SECURITY] Fedora 20 Update: xalan-j2-2.7.1-22.fc20
2014-04-05 04:56:01
[SECURITY] Fedora 19 Update: xalan-j2-2.7.1-22.fc19
2014-04-05 04:53:40
ibm
ibm
nessus
nessus
SuSE 11.3 Security Update : xalan-j2 (SAT Patch Number 9426)
2014-07-05 00:00:00
RHEL 5 / 6 : xalan-j2 (RHSA-2014:0348)
2014-04-02 00:00:00
Oracle Linux 5 / 6 : xalan-j2 (ELSA-2014-0348)
2014-04-02 00:00:00
veracode
veracode
Apache Xalan Remote Code Execution
2019-01-15 08:52:31
redhat
redhat
securityvulns
securityvulns
[oCERT-2014-002] Xalan-Java insufficient secure processing
2014-03-27 00:00:00
[USN-2218-1] Xalan-Java vulnerability
2014-06-14 00:00:00
libxalan security vulnerabilities
2014-03-27 00:00:00
debian
debian
[SECURITY] [DSA 2886-1] libxalan2-java security update
2014-03-26 20:21:08
ubuntucve
ubuntucve
CVE-2014-0107
2014-04-15 00:00:00
openvas
openvas
Fedora Update for xalan-j2 FEDORA-2014-4426
2014-04-08 00:00:00
Fedora Update for xalan-j2 FEDORA-2014-4443
2014-04-08 00:00:00
Debian: Security Advisory (DSA-2886-1)
2014-03-25 00:00:00
f5
f5
SOL15595 - Apache Xalan-Java vulnerability CVE-2014-0107
2014-09-15 00:00:00
K15595 : Apache Xalan-Java vulnerability CVE-2014-0107
2014-09-15 00:00:00
suse
suse
Security update for xalan-j2 (important)
2014-07-04 21:04:15
osv
osv
Improper Authorization in Apache Xalan-Java
2022-05-13 01:05:38
seebug
seebug
Apache Xalan-Java Library安全绕过漏洞
2014-04-03 00:00:00
debiancve
debiancve
CVE-2014-0107
2014-04-15 23:13:00
amazon
amazon
Important: xalan-j2
2014-04-17 23:50:00
oraclelinux
oraclelinux
xalan-j2 security update
2014-04-01 00:00:00
prion
prion
Design/Logic Flaw
2014-04-15 23:13:00
github
github
Improper Authorization in Apache Xalan-Java
2022-05-13 01:05:38
gentoo
gentoo
Xalan-Java: Arbitrary code execution
2016-04-02 00:00:00
cve
cve
CVE-2014-0107
2014-04-15 23:13:00
centos
centos
xalan security update
2014-04-02 12:17:13
ubuntu
ubuntu
Xalan-Java vulnerability
2014-05-21 00:00:00
mageia
mageia
Updated xalan-j2 packages fix CVE-2014-0107
2014-04-03 04:50:42
attackerkb
attackerkb
CVE-2022-47966
2023-01-20 00:00:00
oracle
oracle
Oracle Critical Patch Update - January 2016
2016-01-19 00:00:00
Oracle Critical Patch Update Advisory - April 2019
2019-04-16 00:00:00
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00