Lucene search
SuseOPENSUSE-SU-2018:4045-1HistoryDec 08, 2018 - 12:22 a.m.
Security update for dom4j (moderate)
2018-12-0800:22:56
lists.opensuse.org
65
0.005 Low
EPSS
Percentile
72.6%
This update for dom4j fixes the following issues:
- CVE-2018-1000632: Prevent XML injection that could have resulted in an
attacker tampering with XML documents (bsc#1105443).
This update was imported from the SUSE:SLE-15:Update update project. This
update was imported from the openSUSE:Leap:15.0:Update update project.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE Backports SLE | 15 | noarch | dom4j-javadoc | < 1.6.1-bp150.2.3.1 | dom4j-javadoc-1.6.1-bp150.2.3.1.noarch.rpm |
| openSUSE Backports SLE | 15 | noarch | dom4j | < 1.6.1-bp150.2.3.1 | dom4j-1.6.1-bp150.2.3.1.noarch.rpm |
| openSUSE Backports SLE | 15 | noarch | dom4j-manual | < 1.6.1-bp150.2.3.1 | dom4j-manual-1.6.1-bp150.2.3.1.noarch.rpm |
| openSUSE Backports SLE | 15 | noarch | dom4j-demo | < 1.6.1-bp150.2.3.1 | dom4j-demo-1.6.1-bp150.2.3.1.noarch.rpm |
References
Related
redhatcve
redhatcve
CVE-2018-1000632
2020-03-16 07:35:07
nessus
nessus
EulerOS 2.0 SP2 : dom4j (EulerOS-SA-2019-2405)
2019-12-10 00:00:00
Ubuntu 16.04 LTS : dom4j vulnerability (USN-4619-1)
2020-11-06 00:00:00
EulerOS 2.0 SP5 : dom4j (EulerOS-SA-2019-1960)
2019-09-23 00:00:00
osv
osv
dom4j vulnerability
2020-11-05 16:09:57
CVE-2018-1000632
2018-08-20 19:31:31
dom4j - security update
2018-09-24 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: dom4j-2.0.3-1.fc33
2021-05-12 16:13:28
[SECURITY] Fedora 34 Update: dom4j-2.0.3-1.fc34
2021-05-12 05:44:36
github
github
Dom4j contains a XML Injection vulnerability
2018-10-16 17:01:25
openvas
openvas
Fedora: Security Advisory for dom4j (FEDORA-2021-f28c870528)
2021-05-13 00:00:00
openSUSE: Security Advisory for dom4j (openSUSE-SU-2018:2931-1)
2018-09-28 00:00:00
openSUSE: Security Advisory for dom4j (openSUSE-SU-2018:3998-1)
2018-12-10 00:00:00
prion
prion
Input validation
2018-08-20 19:31:00
debiancve
debiancve
CVE-2018-1000632
2018-08-20 19:31:00
ibm
ibm
Security Bulletin: IBM Security Verify Governance is vulnerable to arbitrary code execution due to use of dom4j (CVE-2018-1000632)
2022-11-21 12:41:38
suse
suse
Security update for dom4j (moderate)
2018-09-28 12:13:53
Security update for dom4j (moderate)
2018-12-07 12:12:51
veracode
veracode
XML External Entity (XXE)
2018-08-21 09:14:23
debian
debian
[SECURITY] [DLA 1517-1] dom4j security update
2018-09-24 18:11:01
ubuntucve
ubuntucve
CVE-2018-1000632
2018-08-20 00:00:00
mageia
mageia
Updated dom4j packages fix security vulnerability
2019-02-14 11:38:16
cve
cve
CVE-2018-1000632
2018-08-20 19:31:00
ubuntu
ubuntu
dom4j vulnerability
2020-11-05 00:00:00
redhat
redhat
atlassian
atlassian
hp
hp
HP Device Manager Security Updates
2023-10-20 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2019
2019-01-15 00:00:00
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00
Oracle Critical Patch Update Advisory - July 2020
2020-07-14 00:00:00