Evil-DB LogoEvil-DB
← All CVEs

CVE-2015-1833

medium · 6.4

XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.1, and 2.10.x before 2.10.1 allows remote attackers to read arbitrary files and send requests to intranet servers via a crafted WebDAV request.

6.4
CVSS
55.0%
EPSS (exploit prob.)
99th
EPSS percentile
2015-05-29
Published

AV:N/AC:L/Au:N/C:P/I:P/A:N

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
apachejackrabbit<= 2.0.5
apachejackrabbit2.2.0
apachejackrabbit2.2.1
apachejackrabbit2.2.2
apachejackrabbit2.2.4
apachejackrabbit2.2.5
apachejackrabbit2.2.7
apachejackrabbit2.2.8
apachejackrabbit2.2.9
apachejackrabbit2.2.10
apachejackrabbit2.2.11
apachejackrabbit2.2.12
apachejackrabbit2.2.13
apachejackrabbit2.4.0
apachejackrabbit2.4.1
apachejackrabbit2.4.2
apachejackrabbit2.4.3
apachejackrabbit2.4.4
apachejackrabbit2.4.5
apachejackrabbit2.6.0
apachejackrabbit2.6.1
apachejackrabbit2.6.2
apachejackrabbit2.6.3
apachejackrabbit2.6.4
apachejackrabbit2.6.5
apachejackrabbit2.8.0
apachejackrabbit2.10.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2015-1833