Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:04:51 +0000 cnvd-2017-07133 https://cve.radiocsirt.org/vuln/cnvd-2017-07133 cnvd-2017-07133 https://cve.radiocsirt.org/vuln/cnvd-2017-07133 EUVD-2026-74713 https://cve.radiocsirt.org/vuln/euvd-2026-74713 EUVD-2026-74713 https://cve.radiocsirt.org/vuln/euvd-2026-74713 fkie_cve-2017-7465 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7465 <p>It was found that the JAXP implementation used in JBoss EAP 7.0 for XSLT processing is vulnerable to code injection. An attacker could use this flaw to cause remote code execution if they are able to provide XSLT content for parsing. Doing a transform in JAXP requires the use of a &#39;javax.xml.transform.TransformerFactory&#39;. If the FEATURE_SECURE_PROCESSING feature is set to &#39;true&#39;, it mitigates this vulnerability.</p> <p>It was found that the JAXP implementation used in JBoss EAP 7.0 for XSLT processing is vulnerable to code injection. An attacker could use this flaw to cause remote code execution if they are able to provide XSLT content for parsing. Doing a transform in JAXP requires the use of a &#39;javax.xml.transform.TransformerFactory&#39;. If the FEATURE_SECURE_PROCESSING feature is set to &#39;true&#39;, it mitigates this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-7465 GHSA-x996-h3mp-c4p4 https://cve.radiocsirt.org/vuln/ghsa-x996-h3mp-c4p4 <p>It was found that the JAXP implementation used in JBoss EAP 7.0 for XSLT processing is vulnerable to code injection. An attacker could use this flaw to cause remote code execution if they are able to provide XSLT content for parsing. Doing a transform in JAXP requires the use of a &#39;javax.xml.transform.TransformerFactory&#39;. If the FEATURE_SECURE_PROCESSING feature is set to &#39;true&#39;, it mitigates this vulnerability.</p> <p>It was found that the JAXP implementation used in JBoss EAP 7.0 for XSLT processing is vulnerable to code injection. An attacker could use this flaw to cause remote code execution if they are able to provide XSLT content for parsing. Doing a transform in JAXP requires the use of a &#39;javax.xml.transform.TransformerFactory&#39;. If the FEATURE_SECURE_PROCESSING feature is set to &#39;true&#39;, it mitigates this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-x996-h3mp-c4p4 gsd-2017-7465 https://cve.radiocsirt.org/vuln/gsd-2017-7465 gsd-2017-7465 https://cve.radiocsirt.org/vuln/gsd-2017-7465 RHSA-2020:2563 — Red Hat Security Advisory: EAP Continuous Delivery Technical Preview Release 14 security update https://cve.radiocsirt.org/vuln/rhsa-2020:2563 <p>JBoss: JAXP in EAP 7.0 allows RCE via XSL EAP: XXE issue in TransformerFactory</p> <p>JBoss: JAXP in EAP 7.0 allows RCE via XSL EAP: XXE issue in TransformerFactory</p> https://cve.radiocsirt.org/vuln/rhsa-2020:2563