CVE-2011-1483: hp network_node_manager_i
Vulnerability summary
CVE-2011-1483 is a medium (CVSS 5.0) vulnerability in hp network_node_manager_i. EPSS estimates a 2.66% chance of exploitation in the next 30 days, higher than 85.4% of scored vulnerabilities.
Timeline
- 28-07-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05, 4.3.CP05, and 5.1.0; JBoss Communications Platform 1.2.11 and 5.1.1; JBoss Enterprise BRMS Platform 5.1.0; and JBoss Enterprise Web Platform 5.1.1 does not properly handle recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted request containing an XML document with a DOCTYPE declaration and a large number of nested entity references, a similar issue to CVE-2003-1564.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.66%
Chance of exploitation in the next 30 days
Percentile
85%
Versus all other CVEs
30-day change
0.00 pp
From 2.66% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Redhat10 products
- jboss_communications_platform1.2.11 | 5.1.1
- jboss_enterprise_application_platform4.2.0:cp09 | 4.3.0 | 5.1.1
- jboss_enterprise_brms_platform5.1.0
- jboss_enterprise_portal_platform4.3.0:cp06 | 5.1.1
- jboss_enterprise_soa_platform4.2.0:cp05 | 4.3.0:cp05 | 5.1.0
Hp1 product
- network_node_manager_i9.0 | 9.01 | 9.02 | 9.03 | 9.10
Org.jboss.ws1 product
- jbossws-common< 2.1.0.Final
3 vendors · 12 products
References
16 links- h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03824583Vendor AdvisoryX Refsource HP
