Riskcovery

CVE-2017-15691

State
Published
Severity
Not scored
Published
Apr 26, 2018
Updated
Sep 16, 2024
Reserved
Oct 21, 2017

Read the record on cve.org

Description

In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion (XXE) capability of various XML parsers. UIMA as part of its configuration and operation may read XML from various sources, which could be tainted in ways to cause inadvertent disclosure of local files or other internal content.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Apache UIMAApache Software Foundation
  • uimaj prior to 2.10.2Affected
  • uimaj 3.0.0-xxx prior to 3.0.0-betaAffected
  • uima-as prior to 2.10.2Affected
  • uimaFIT prior to 2.4.0Affected
  • uimaDUCC prior to 2.2.2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.