2017-10-16 12:31:07 -04:00
{
2019-04-23 20:00:49 +00:00
"CVE_data_meta" : {
"ASSIGNER" : "secalert@redhat.com" ,
"ID" : "CVE-2014-0107" ,
"STATE" : "PUBLIC"
2019-03-18 02:19:07 +00:00
} ,
2019-04-23 20:00:49 +00:00
"affects" : {
"vendor" : {
"vendor_data" : [
2019-03-18 02:19:07 +00:00
{
2019-04-23 20:00:49 +00:00
"product" : {
"product_data" : [
2019-03-18 02:19:07 +00:00
{
2019-04-23 20:00:49 +00:00
"product_name" : "n/a" ,
"version" : {
"version_data" : [
2019-03-18 02:19:07 +00:00
{
2019-04-23 20:00:49 +00:00
"version_value" : "n/a"
2019-03-18 02:19:07 +00:00
}
]
}
}
]
} ,
2019-04-23 20:00:49 +00:00
"vendor_name" : "n/a"
2019-03-18 02:19:07 +00:00
}
2017-10-16 12:31:07 -04:00
]
2019-03-18 02:19:07 +00:00
}
} ,
2019-04-23 20:00:49 +00:00
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
"value" : "The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass expected restrictions and load arbitrary classes or access external resources via a crafted (1) xalan:content-header, (2) xalan:entities, (3) xslt:content-header, or (4) xslt:entities property, or a Java property that is bound to the XSLT 1.0 system-property function."
2019-03-18 02:19:07 +00:00
}
]
} ,
2019-04-23 20:00:49 +00:00
"problemtype" : {
"problemtype_data" : [
2019-03-18 02:19:07 +00:00
{
2019-04-23 20:00:49 +00:00
"description" : [
2019-03-18 02:19:07 +00:00
{
2019-04-23 20:00:49 +00:00
"lang" : "eng" ,
"value" : "n/a"
2019-03-18 02:19:07 +00:00
}
]
}
]
} ,
2019-04-23 20:00:49 +00:00
"references" : {
"reference_data" : [
2019-03-18 02:19:07 +00:00
{
2019-04-23 20:00:49 +00:00
"name" : "GLSA-201604-02" ,
"refsource" : "GENTOO" ,
"url" : "https://security.gentoo.org/glsa/201604-02"
2019-03-18 02:19:07 +00:00
} ,
{
2019-04-23 20:00:49 +00:00
"name" : "59291" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/59291"
2019-03-18 02:19:07 +00:00
} ,
{
2019-04-23 20:00:49 +00:00
"name" : "59290" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/59290"
2019-03-18 02:19:07 +00:00
} ,
{
2019-04-23 20:00:49 +00:00
"name" : "RHSA-2015:1888" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2015-1888.html"
2019-03-18 02:19:07 +00:00
} ,
{
2019-04-23 20:00:49 +00:00
"name" : "59151" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/59151"
2019-03-18 02:19:07 +00:00
} ,
{
2019-04-23 20:00:49 +00:00
"name" : "59247" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/59247"
2019-03-18 02:19:07 +00:00
} ,
{
2019-04-23 20:00:49 +00:00
"name" : "59515" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/59515"
2019-03-18 02:19:07 +00:00
} ,
{
2019-04-23 20:00:49 +00:00
"name" : "DSA-2886" ,
"refsource" : "DEBIAN" ,
"url" : "http://www.debian.org/security/2014/dsa-2886"
2019-03-18 02:19:07 +00:00
} ,
{
2019-04-23 20:00:49 +00:00
"name" : "60502" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/60502"
2019-03-18 02:19:07 +00:00
} ,
{
2019-04-23 20:00:49 +00:00
"name" : "59369" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/59369"
2019-03-18 02:19:07 +00:00
} ,
{
2019-04-23 20:00:49 +00:00
"name" : "59711" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/59711"
2019-03-18 02:19:07 +00:00
} ,
{
2019-04-23 20:00:49 +00:00
"name" : "57563" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/57563"
2019-03-18 02:19:07 +00:00
} ,
{
2019-04-23 20:00:49 +00:00
"name" : "66397" ,
"refsource" : "BID" ,
"url" : "http://www.securityfocus.com/bid/66397"
2019-03-18 02:19:07 +00:00
} ,
{
2019-04-23 20:00:49 +00:00
"name" : "1034711" ,
"refsource" : "SECTRACK" ,
"url" : "http://www.securitytracker.com/id/1034711"
2019-03-18 02:19:07 +00:00
} ,
{
2019-04-23 20:00:49 +00:00
"name" : "1034716" ,
"refsource" : "SECTRACK" ,
"url" : "http://www.securitytracker.com/id/1034716"
2019-03-18 02:19:07 +00:00
} ,
{
2019-04-23 20:00:49 +00:00
"name" : "RHSA-2014:1351" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2014-1351.html"
2019-03-18 02:19:07 +00:00
} ,
{
2019-04-23 20:00:49 +00:00
"name" : "RHSA-2014:0348" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2014-0348.html"
2019-03-18 02:19:07 +00:00
} ,
{
2019-04-23 20:00:49 +00:00
"name" : "59036" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/59036"
2019-03-18 02:19:07 +00:00
} ,
{
2019-04-23 20:00:49 +00:00
"name" : "apache-xalanjava-cve20140107-sec-bypass(92023)" ,
"refsource" : "XF" ,
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/92023"
2019-04-23 04:53:58 -07:00
} ,
2019-10-17 22:01:04 +00:00
{
"refsource" : "MLIST" ,
"name" : "[drill-dev] 20191017 Dependencies used by Drill contain known vulnerabilities" ,
"url" : "https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E"
2019-10-21 15:59:19 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities" ,
"url" : "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E"
2021-07-20 14:01:27 -07:00
} ,
{
2021-07-21 15:01:44 +00:00
"url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html" ,
"refsource" : "MISC" ,
"name" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
} ,
{
"name" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html" ,
"refsource" : "CONFIRM" ,
"url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
} ,
{
"name" : "http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html" ,
"refsource" : "CONFIRM" ,
"url" : "http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html"
} ,
{
"url" : "https://www.oracle.com//security-alerts/cpujul2021.html" ,
"refsource" : "MISC" ,
"name" : "https://www.oracle.com//security-alerts/cpujul2021.html"
} ,
{
"name" : "https://issues.apache.org/jira/browse/XALANJ-2435" ,
"refsource" : "CONFIRM" ,
"url" : "https://issues.apache.org/jira/browse/XALANJ-2435"
} ,
{
"name" : "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755" ,
"refsource" : "CONFIRM" ,
"url" : "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755"
} ,
{
"name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21676093" ,
"refsource" : "CONFIRM" ,
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21676093"
} ,
{
"name" : "http://www.ibm.com/support/docview.wss?uid=swg21677967" ,
"refsource" : "CONFIRM" ,
"url" : "http://www.ibm.com/support/docview.wss?uid=swg21677967"
} ,
{
"name" : "https://www.tenable.com/security/tns-2018-15" ,
"refsource" : "CONFIRM" ,
"url" : "https://www.tenable.com/security/tns-2018-15"
} ,
{
"name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21677145" ,
"refsource" : "CONFIRM" ,
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21677145"
} ,
{
"name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21681933" ,
"refsource" : "CONFIRM" ,
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21681933"
} ,
{
"name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21674334" ,
"refsource" : "CONFIRM" ,
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21674334"
} ,
{
"name" : "http://www.ocert.org/advisories/ocert-2014-002.html" ,
"refsource" : "MISC" ,
"url" : "http://www.ocert.org/advisories/ocert-2014-002.html"
} ,
{
"name" : "http://svn.apache.org/viewvc?view=revision&revision=1581058" ,
"refsource" : "CONFIRM" ,
"url" : "http://svn.apache.org/viewvc?view=revision&revision=1581058"
} ,
{
"name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21680703" ,
"refsource" : "CONFIRM" ,
"url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21680703"
2021-08-23 22:00:51 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[tomcat-dev] 20210823 [Bug 65516] New: upgrade to xalan 2.7.2 to address CVE-2014-0107" ,
"url" : "https://lists.apache.org/thread.html/r0c00afcab8f238562e27b3ae7b8af1913c62bc60838fb8b34c19e26b@%3Cdev.tomcat.apache.org%3E"
2021-08-24 01:00:51 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[tomcat-dev] 20210823 [Bug 65516] upgrade to xalan 2.7.2 to address CVE-2014-0107" ,
"url" : "https://lists.apache.org/thread.html/r2900489bc665a2e32d021bb21f6ce2cb8e6bb5973490eebb9a346bca@%3Cdev.tomcat.apache.org%3E"
2021-10-19 14:23:14 -07:00
} ,
{
2021-10-20 11:01:07 +00:00
"url" : "https://www.oracle.com/security-alerts/cpuoct2021.html" ,
"refsource" : "MISC" ,
"name" : "https://www.oracle.com/security-alerts/cpuoct2021.html"
2019-03-18 02:19:07 +00:00
}
]
}
}
