CVE-2015-1818 XML external entity in n/a

What is CVE-2015-1818?

CVE-2015-1818 is a high-severity vulnerability in n/a, published on 11 Aug 2015. It can be exploited over the network, with no action from the victim.

Official description

XML external entity (XXE) vulnerability in the dashbuilder import facility (DocumentBuilders in org.jboss.dashboard.export.ImportManagerImpl) in Red Hat JBoss BPM Suite before 6.1.2 allows remote attackers to read arbitrary files, conduct server-side request forgery (SSRF) attacks, and have other unspecified impact via a crafted XML document.

Which versions are affected by CVE-2015-1818?

It affects 1 product.

Products include Redhat Jboss Bpm Suite.

How do I fix CVE-2015-1818?

No fix has been published for CVE-2015-1818 yet. Limit exposure of the affected software until one is available.

Is CVE-2015-1818 being exploited?

There is no known exploitation of CVE-2015-1818 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2016-5401 Cross-site request forgery in n/a High 8.8
• CVE-2016-7034 Cross-site request forgery in n/a High 8.8
• CVE-2013-6468 Code injection in n/a Medium 6.5
• CVE-2016-6343 Cross-site scripting in Dashbuilder Medium 6.1
• CVE-2017-2674 Cross-site scripting in business-central Medium 6.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-c64m-pjpp-mqqj.