Vulnerabilities > CVE-2014-3643 - XXE vulnerability in Jersey Project Jersey
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
jersey: XXE via parameter entities not disabled by the jersey SAX parser
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Common Weakness Enumeration (CWE)
Redhat
| advisories |
|
References
- https://access.redhat.com/security/cve/cve-2014-3643
- https://access.redhat.com/security/cve/cve-2014-3643
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3643
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3643
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://www.oracle.com/security-alerts/cpujul2022.html