CVE-2013-4002: apache xerces2_java

CVSS: 7.1v2.0HighModified

AliasesMGASA-2014-0398RHSA-2014:1319RHSA-2014:1818+3 more

Published 23-07-2013Last modified 06-08-2024

Vulnerability summary

CVE-2013-4002 is a high (CVSS 7.1) vulnerability in apache xerces2_java. EPSS estimates a 24.74% chance of exploitation in the next 30 days, higher than 97.8% of scored vulnerabilities.

Overall risk

33/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.1/10

010

High · v2.0 (NVD)

EPSS score

24.74%

0%100%

High · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 11 · Related 1

MGASA-2013-0322 MGASA-2013-0323 OPENSUSE-SU-2024:10534-1 RHSA-2013:1059 RHSA-2013:1060 RHSA-2013:1081+5 more

Timeline

23-07-2013
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, Java SE Embedded 7u40 and earlier, and possibly other products allows remote attackers to cause a denial of service via vectors related to XML attribute names.

CVSS metrics

1 score · 1 source · 1 version

v2.07.1

EPSS trend

Probability

24.74%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 24.74% on 18-09-2026

18-09-202618-10-2026

EPSS score

24.74%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat115 products

apache-cxf< 0:2.7.12-1.SP1_redhat_1.1.ep6.el6 | < 0:2.7.12-1.SP1_redhat_1.1.ep6.el5 | < 0:2.7.12-1.SP1_redhat_1.1.ep6.el7
apache-cxf-xjc-utils< 0:2.6.2-3.redhat_1.1.ep6.el6 | < 0:2.6.2-3.redhat_1.1.ep6.el5 | < 0:2.6.2-3.redhat_1.1.ep6.el7
cxf-xjc-boolean< 0:2.6.2-3.redhat_1.1.ep6.el6 | < 0:2.6.2-3.redhat_1.1.ep6.el5 | < 0:2.6.2-3.redhat_1.1.ep6.el7
cxf-xjc-dv< 0:2.6.2-3.redhat_1.1.ep6.el6 | < 0:2.6.2-3.redhat_1.1.ep6.el5 | < 0:2.6.2-3.redhat_1.1.ep6.el7
cxf-xjc-ts< 0:2.6.2-3.redhat_1.1.ep6.el6 | < 0:2.6.2-3.redhat_1.1.ep6.el5 | < 0:2.6.2-3.redhat_1.1.ep6.el7

hibernate4-core-eap6< 0:4.2.14-9.SP4_redhat_1.1.ep6.el6 | < 0:4.2.14-9.SP4_redhat_1.1.ep6.el5 | < 0:4.2.14-9.SP4_redhat_1.1.ep6.el7
hibernate4-eap6< 0:4.2.14-9.SP4_redhat_1.1.ep6.el6 | < 0:4.2.14-9.SP4_redhat_1.1.ep6.el5 | < 0:4.2.14-9.SP4_redhat_1.1.ep6.el7
hibernate4-entitymanager-eap6< 0:4.2.14-9.SP4_redhat_1.1.ep6.el6 | < 0:4.2.14-9.SP4_redhat_1.1.ep6.el5 | < 0:4.2.14-9.SP4_redhat_1.1.ep6.el7
hibernate4-envers-eap6< 0:4.2.14-9.SP4_redhat_1.1.ep6.el6 | < 0:4.2.14-9.SP4_redhat_1.1.ep6.el5 | < 0:4.2.14-9.SP4_redhat_1.1.ep6.el7
hibernate4-infinispan-eap6< 0:4.2.14-9.SP4_redhat_1.1.ep6.el6 | < 0:4.2.14-9.SP4_redhat_1.1.ep6.el5 | < 0:4.2.14-9.SP4_redhat_1.1.ep6.el7
ironjacamar-common-api-eap6< 0:1.0.28-1.Final_redhat_1.1.ep6.el6 | < 0:1.0.28-1.Final_redhat_1.1.ep6.el5 | < 0:1.0.28-1.Final_redhat_1.1.ep6.el7
ironjacamar-common-impl-eap6< 0:1.0.28-1.Final_redhat_1.1.ep6.el6 | < 0:1.0.28-1.Final_redhat_1.1.ep6.el5 | < 0:1.0.28-1.Final_redhat_1.1.ep6.el7
ironjacamar-common-spi-eap6< 0:1.0.28-1.Final_redhat_1.1.ep6.el6 | < 0:1.0.28-1.Final_redhat_1.1.ep6.el5 | < 0:1.0.28-1.Final_redhat_1.1.ep6.el7
ironjacamar-core-api-eap6< 0:1.0.28-1.Final_redhat_1.1.ep6.el6 | < 0:1.0.28-1.Final_redhat_1.1.ep6.el5 | < 0:1.0.28-1.Final_redhat_1.1.ep6.el7
ironjacamar-core-impl-eap6< 0:1.0.28-1.Final_redhat_1.1.ep6.el6 | < 0:1.0.28-1.Final_redhat_1.1.ep6.el5 | < 0:1.0.28-1.Final_redhat_1.1.ep6.el7
ironjacamar-deployers-common-eap6< 0:1.0.28-1.Final_redhat_1.1.ep6.el6 | < 0:1.0.28-1.Final_redhat_1.1.ep6.el5 | < 0:1.0.28-1.Final_redhat_1.1.ep6.el7
ironjacamar-eap6< 0:1.0.28-1.Final_redhat_1.1.ep6.el6 | < 0:1.0.28-1.Final_redhat_1.1.ep6.el5 | < 0:1.0.28-1.Final_redhat_1.1.ep6.el7
ironjacamar-jdbc-eap6< 0:1.0.28-1.Final_redhat_1.1.ep6.el6 | < 0:1.0.28-1.Final_redhat_1.1.ep6.el5 | < 0:1.0.28-1.Final_redhat_1.1.ep6.el7
ironjacamar-spec-api-eap6< 0:1.0.28-1.Final_redhat_1.1.ep6.el6 | < 0:1.0.28-1.Final_redhat_1.1.ep6.el5 | < 0:1.0.28-1.Final_redhat_1.1.ep6.el7
ironjacamar-validator-eap6< 0:1.0.28-1.Final_redhat_1.1.ep6.el6 | < 0:1.0.28-1.Final_redhat_1.1.ep6.el5 | < 0:1.0.28-1.Final_redhat_1.1.ep6.el7
javassist-eap6< 0:3.18.1-5.GA_redhat_1.1.ep6.el6 | < 0:3.18.1-5.GA_redhat_1.1.ep6.el5 | < 0:3.18.1-5.GA_redhat_1.1.ep6.el7
jboss-as-appclient< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-cli< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-client-all< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-clustering< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-cmp< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-configadmin< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-connector< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-console< 0:2.2.11-1.Final_redhat_1.1.ep6.el6 | < 0:2.2.11-1.Final_redhat_1.1.ep6.el5 | < 0:2.2.11-1.Final_redhat_1.1.ep6.el7
jboss-as-controller< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-controller-client< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-core-security< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-deployment-repository< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-deployment-scanner< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-domain-http< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-domain-management< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-ee< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-ee-deployment< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-ejb3< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-embedded< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-host-controller< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-jacorb< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-jaxr< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-jaxrs< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-jdr< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-jmx< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-jpa< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-jsf< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-jsr77< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-logging< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-mail< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-management-client-content< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-messaging< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-modcluster< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-naming< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-network< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-osgi< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-osgi-configadmin< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-osgi-service< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-picketlink< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-platform-mbean< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-pojo< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-process-controller< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-protocol< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-remoting< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-sar< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-security< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-server< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-system-jmx< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-threads< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-transactions< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-version< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-web< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-webservices< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-weld< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-as-xts< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jboss-hal< 0:2.2.11-1.Final_redhat_1.1.ep6.el6 | < 0:2.2.11-1.Final_redhat_1.1.ep6.el5 | < 0:2.2.11-1.Final_redhat_1.1.ep6.el7
jboss-logmanager< 0:1.5.2-2.Final_redhat_2.1.ep6.el6 | < 0:1.5.2-2.Final_redhat_2.1.ep6.el5 | < 0:1.5.2-2.Final_redhat_2.1.ep6.el7
jboss-metadata< 0:7.1.2-1.Final_redhat_1.1.ep6.el6 | < 0:7.1.2-1.Final_redhat_1.1.ep6.el5 | < 0:7.1.2-1.Final_redhat_1.1.ep6.el7
jboss-metadata-appclient< 0:7.1.2-1.Final_redhat_1.1.ep6.el6 | < 0:7.1.2-1.Final_redhat_1.1.ep6.el5 | < 0:7.1.2-1.Final_redhat_1.1.ep6.el7
jboss-metadata-common< 0:7.1.2-1.Final_redhat_1.1.ep6.el6 | < 0:7.1.2-1.Final_redhat_1.1.ep6.el5 | < 0:7.1.2-1.Final_redhat_1.1.ep6.el7
jboss-metadata-ear< 0:7.1.2-1.Final_redhat_1.1.ep6.el6 | < 0:7.1.2-1.Final_redhat_1.1.ep6.el5 | < 0:7.1.2-1.Final_redhat_1.1.ep6.el7
jboss-metadata-ejb< 0:7.1.2-1.Final_redhat_1.1.ep6.el6 | < 0:7.1.2-1.Final_redhat_1.1.ep6.el5 | < 0:7.1.2-1.Final_redhat_1.1.ep6.el7
jboss-metadata-web< 0:7.1.2-1.Final_redhat_1.1.ep6.el6 | < 0:7.1.2-1.Final_redhat_1.1.ep6.el5 | < 0:7.1.2-1.Final_redhat_1.1.ep6.el7
jboss-remoting3-jmx< 0:1.1.3-1.Final_redhat_2.1.ep6.el6 | < 0:1.1.3-1.Final_redhat_2.1.ep6.el5 | < 0:1.1.3-1.Final_redhat_2.1.ep6.el7
jboss-xnio-base< 0:3.0.11-1.GA_redhat_2.1.ep6.el6 | < 0:3.0.11-1.GA_redhat_2.1.ep6.el5 | < 0:3.0.11-1.GA_redhat_2.1.ep6.el7
jbossas-appclient< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jbossas-bundles< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jbossas-core< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jbossas-domain< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jbossas-javadocs< 0:7.4.2-2.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-2.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-2.Final_redhat_2.1.ep6.el7
jbossas-modules-eap< 0:7.4.2-2.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-2.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-2.Final_redhat_2.1.ep6.el7
jbossas-product-eap< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jbossas-standalone< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jbossas-welcome-content-eap< 0:7.4.2-3.Final_redhat_2.1.ep6.el6 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el5 | < 0:7.4.2-3.Final_redhat_2.1.ep6.el7
jbossws-common< 0:2.3.1-1.Final_redhat_1.1.ep6.el6 | < 0:2.3.1-1.Final_redhat_1.1.ep6.el5 | < 0:2.3.1-1.Final_redhat_1.1.ep6.el7
jbossws-cxf< 0:4.3.1-1.Final_redhat_1.1.ep6.el6 | < 0:4.3.1-1.Final_redhat_1.1.ep6.el5 | < 0:4.3.1-1.Final_redhat_1.1.ep6.el7
netty< 0:3.6.10-1.Final_redhat_1.1.ep6.el6 | < 0:3.6.10-1.Final_redhat_1.1.ep6.el5 | < 0:3.6.10-1.Final_redhat_1.1.ep6.el7
picketlink-bindings< 0:2.5.3-11.SP12_redhat_1.1.ep6.el6 | < 0:2.5.3-11.SP12_redhat_1.1.ep6.el5 | < 0:2.5.3-11.SP12_redhat_1.1.ep6.el7
picketlink-federation< 0:2.5.3-12.SP12_redhat_1.1.ep6.el6 | < 0:2.5.3-12.SP12_redhat_1.1.ep6.el5 | < 0:2.5.3-12.SP12_redhat_1.1.ep6.el7
resteasy< 0:2.3.8-10.SP3_redhat_2.1.ep6.el6 | < 0:2.3.8-10.SP3_redhat_2.1.ep6.el5 | < 0:2.3.8-10.SP3_redhat_2.1.ep6.el7
weld-core< 0:1.1.25-1.Final_redhat_2.1.ep6.el6 | < 0:1.1.25-1.Final_redhat_2.1.ep6.el5 | < 0:1.1.25-1.Final_redhat_2.1.ep6.el7
wss4j< 0:1.6.16-1.redhat_2.1.ep6.el6 | < 0:1.6.16-1.redhat_2.1.ep6.el5 | < 0:1.6.16-1.redhat_2.1.ep6.el7
xerces-j2< 0:2.7.1-12.7.el6_5 | < 0:2.11.0-17.el7_0
xerces-j2-debuginfo< 0:2.7.1-12.7.el6_5
xerces-j2-demo< 0:2.7.1-12.7.el6_5 | < 0:2.11.0-17.el7_0
xerces-j2-eap6< 0:2.9.1-17.redhat_6.1.ep6.el6 | < 0:2.9.1-17.redhat_6.1.ep6.el5 | < 0:2.9.1-17.redhat_6.1.ep6.el7
xerces-j2-javadoc< 0:2.11.0-17.el7_0
xerces-j2-javadoc-apis< 0:2.7.1-12.7.el6_5
xerces-j2-javadoc-impl< 0:2.7.1-12.7.el6_5
xerces-j2-javadoc-other< 0:2.7.1-12.7.el6_5
xerces-j2-javadoc-xni< 0:2.7.1-12.7.el6_5
xerces-j2-scripts< 0:2.7.1-12.7.el6_5
xjc-utils< 0:2.6.2-3.redhat_1.1.ep6.el6 | < 0:2.6.2-3.redhat_1.1.ep6.el5 | < 0:2.6.2-3.redhat_1.1.ep6.el7
xml-security< 0:1.5.7-2.redhat_1.1.ep6.el6 | < 0:1.5.7-2.redhat_1.1.ep6.el5 | < 0:1.5.7-2.redhat_1.1.ep6.el7

Show all 115

Ibm5 products

host_on-demand11.0 | 11.0.1 | 11.0.2 | 11.0.3 | 11.0.4 | 11.0.5 | 11.0.5.1 | 11.0.6 | 11.0.6.1 | 11.0.7 | 11.0.8
java5.0.0.0 | 5.0.11.0 | 5.0.11.1 | 5.0.11.2 | 5.0.12.0 | 5.0.12.1 | 5.0.12.2 | 5.0.12.3 | 5.0.12.4 | 5.0.12.5 | 5.0.13.0 | 5.0.14.0 | 5.0.15.0 | 5.0.16.0 | 5.0.16.1 | 5.0.16.2 | 6.0.0.0 | 6.0.1.0 | 6.0.2.0 | 6.0.3.0 | 6.0.4.0 | 6.0.5.0 | 6.0.6.0 | 6.0.7.0 | 6.0.8.0 | 6.0.8.1 | 6.0.9.0 | 6.0.9.1 | 6.0.9.2 | 6.0.10.0 | 6.0.10.1 | 6.0.11.0 | 6.0.12.0 | 6.0.13.0 | 6.0.13.1 | 6.0.13.2 | 7.0.0.0 | 7.0.1.0 | 7.0.2.0 | 7.0.3.0 | 7.0.4.0 | 7.0.4.1 | 7.0.4.2
sterling_b2b_integrator5.2.4 | 5.1 | 5.2
sterling_file_gateway2.1 | 2.2
tivoli_application_dependency_discovery_manager7.2.2

Suse4 products

linux_enterprise_desktop10:sp4 | 11:sp3
linux_enterprise_java10:sp4 | 11:sp2 | 11:sp3
linux_enterprise_sdk11:sp2 | 11:sp3
linux_enterprise_server9 | 10:sp3 | 10:sp4 | 11:sp2 | 11:sp3

Oracle3 products

jdk1.5.0:update51 | 1.6.0:update60 | 1.7.0:update40
jre1.5.0:update51 | 1.6.0:update60 | 1.7.0:update40
jrockit≥ r27.7.0, ≤ r27.7.6 | ≥ r28.0.0, ≤ r28.2.8

Mageia2 products

xerces-j2< 2.11.0-8.1.mga3
xerces-j2< 2.11.0-10.1.mga4

Apache1 product

xerces2_java≥ 2.4.0, < 2.12.0

Canonical1 product

ubuntu_linuxEOL10.04 | 12.04 | 12.10 | 13.04 | 13.10

Opensuse1 product

opensuseEOL12.2 | 12.3

Xerces1 product

xercesImpl< 2.12.0

9 vendors · 133 products

References

117 links

www-01.ibm.com/support/docview.wss?uid=swg1IC98015Vendor AdvisoryX Refsource AIXAPARWEB
rhn.redhat.com/errata/RHSA-2013-1060.htmlVendor AdvisoryX Refsource REDHATBroken LinkWEB
access.redhat.com/errata/RHSA-2014:0414Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEB
security.gentoo.org/glsa/glsa-201406-32.xmlVendor AdvisoryX Refsource GENTOOThird Party AdvisoryWEB
rhn.redhat.com/errata/RHSA-2013-1447.htmlVendor AdvisoryX Refsource REDHATBroken LinkWEB
rhn.redhat.com/errata/RHSA-2015-0765.htmlVendor AdvisoryX Refsource REDHATBroken LinkWEB
rhn.redhat.com/errata/RHSA-2013-1440.htmlVendor AdvisoryX Refsource REDHATBroken LinkWEB
rhn.redhat.com/errata/RHSA-2015-0675.htmlVendor AdvisoryX Refsource REDHATBroken LinkWEB
www.securityfocus.com/bid/61310VDB EntryX Refsource BIDThird Party Advisory
rhn.redhat.com/errata/RHSA-2015-0773.htmlVendor AdvisoryX Refsource REDHATBroken LinkWEB

Show all 100 references

rhn.redhat.com/errata/RHSA-2015-0720.htmlVendor AdvisoryX Refsource REDHATBroken LinkWEB
lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.htmlVendor AdvisoryX Refsource SUSEThird Party AdvisoryWEB
www.ubuntu.com/usn/USN-2033-1Vendor AdvisoryX Refsource UBUNTUThird Party AdvisoryWEB
www.ubuntu.com/usn/USN-2089-1Vendor AdvisoryX Refsource UBUNTUThird Party AdvisoryWEB
lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.htmlVendor AdvisoryX Refsource SUSEThird Party AdvisoryWEB
marc.info?l=bugtraq&m=138674073720143&w=2Vendor AdvisoryX Refsource HPIssue TrackingMailing ListThird Party AdvisoryWEB
rhn.redhat.com/errata/RHSA-2013-1505.htmlVendor AdvisoryX Refsource REDHATBroken LinkWEB
marc.info?l=bugtraq&m=138674031212883&w=2Vendor AdvisoryX Refsource HPIssue TrackingMailing ListThird Party AdvisoryWEB
rhn.redhat.com/errata/RHSA-2014-1822.htmlVendor AdvisoryX Refsource REDHATBroken LinkWEB
secunia.com/advisories/56257Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.htmlVendor AdvisoryX Refsource SUSEThird Party AdvisoryWEB
rhn.redhat.com/errata/RHSA-2013-1059.htmlVendor AdvisoryX Refsource REDHATBroken LinkWEB
rhn.redhat.com/errata/RHSA-2014-1823.htmlVendor AdvisoryX Refsource REDHATBroken LinkWEB
lists.opensuse.org/opensuse-updates/2013-11/msg00023.htmlVendor AdvisoryX Refsource SUSEThird Party AdvisoryWEB
lists.opensuse.org/opensuse-security-announce/2013-11/msg00010.htmlVendor AdvisoryX Refsource SUSEThird Party AdvisoryWEB
lists.apple.com/archives/security-announce/2013/Oct/msg00001.htmlVendor AdvisoryX Refsource APPLEBroken LinkMailing ListWEB
lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.htmlVendor AdvisoryX Refsource SUSEThird Party AdvisoryWEB
rhn.redhat.com/errata/RHSA-2013-1081.htmlVendor AdvisoryX Refsource REDHATBroken LinkWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.htmlVendor AdvisoryX Refsource SUSEThird Party AdvisoryWEB
rhn.redhat.com/errata/RHSA-2013-1451.htmlVendor AdvisoryX Refsource REDHATBroken LinkWEB
rhn.redhat.com/errata/RHSA-2014-1818.htmlVendor AdvisoryX Refsource REDHATBroken LinkWEB
rhn.redhat.com/errata/RHSA-2014-1821.htmlVendor AdvisoryX Refsource REDHATBroken LinkWEB
lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.htmlVendor AdvisoryX Refsource SUSEThird Party AdvisoryWEB
exchange.xforce.ibmcloud.com/vulnerabilities/85260VDB EntryX Refsource XFVendor AdvisoryWEB
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
www.oracle.com/security-alerts/cpuapr2022.htmlX Refsource MISCWEB
www.ibm.com/support/docview.wss?uid=swg21648172X Refsource CONFIRMBroken LinkWEB
www-01.ibm.com/support/docview.wss?uid=swg21657539X Refsource CONFIRMVendor AdvisoryWEB
issues.apache.org/jira/browse/XERCESJ-1679X Refsource CONFIRMIssue TrackingVendor AdvisoryWEB
svn.apache.org/viewvc/…X Refsource CONFIRMPatchVendor AdvisoryWEB
www-01.ibm.com/support/docview.wss?uid=swg21644197X Refsource CONFIRMVendor AdvisoryWEB
www-01.ibm.com/support/docview.wss?uid=swg21653371X Refsource CONFIRMVendor AdvisoryWEB
www.ibm.com/developerworks/java/jdk/alerts/X Refsource MISCVendor AdvisoryWEB
support.apple.com/kb/HT5982X Refsource CONFIRMThird Party AdvisoryWEB
www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.htmlX Refsource CONFIRMThird Party AdvisoryWEB
www.ibm.com/connections/…X Refsource CONFIRMVendor AdvisoryWEB
www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS13-025/index.htmlX Refsource CONFIRMThird Party AdvisoryWEB
advisories.mageia.org/MGASA-2014-0398.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=14176REPORT
rhn.redhat.com/errata/RHSA-2014-1319.htmlWEB
www.mandriva.com/en/support/security/advisories/mbs1/MDVSA-2014%3A193/Advisory
access.redhat.com/errata/RHSA-2014:1319Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1019176REPORT
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1319.jsonAdvisory
access.redhat.com/security/cve/CVE-2013-4002REPORT
www.cve.org/CVERecord?id=CVE-2013-4002Advisory
nvd.nist.gov/vuln/detail/CVE-2013-4002Advisory
www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.htmlARTICLE
access.redhat.com/errata/RHSA-2014:1818Advisory
bugzilla.redhat.com/show_bug.cgi?id=1147622REPORT
bugzilla.redhat.com/show_bug.cgi?id=1147628REPORT
bugzilla.redhat.com/show_bug.cgi?id=1149797REPORT
bugzilla.redhat.com/show_bug.cgi?id=1149800REPORT
bugzilla.redhat.com/show_bug.cgi?id=1149803REPORT
bugzilla.redhat.com/show_bug.cgi?id=1149814REPORT
bugzilla.redhat.com/show_bug.cgi?id=1149817REPORT
bugzilla.redhat.com/show_bug.cgi?id=1149820REPORT
bugzilla.redhat.com/show_bug.cgi?id=1149823REPORT
bugzilla.redhat.com/show_bug.cgi?id=1149826REPORT
bugzilla.redhat.com/show_bug.cgi?id=1150704REPORT
bugzilla.redhat.com/show_bug.cgi?id=1150894REPORT
bugzilla.redhat.com/show_bug.cgi?id=1151605REPORT
bugzilla.redhat.com/show_bug.cgi?id=1151609REPORT
bugzilla.redhat.com/show_bug.cgi?id=1151612REPORT
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1818.jsonAdvisory
access.redhat.com/errata/RHSA-2014:1821Advisory
bugzilla.redhat.com/show_bug.cgi?id=1147623REPORT
bugzilla.redhat.com/show_bug.cgi?id=1147629REPORT
bugzilla.redhat.com/show_bug.cgi?id=1149798REPORT
bugzilla.redhat.com/show_bug.cgi?id=1149801REPORT
bugzilla.redhat.com/show_bug.cgi?id=1149804REPORT
bugzilla.redhat.com/show_bug.cgi?id=1149815REPORT
bugzilla.redhat.com/show_bug.cgi?id=1149818REPORT
bugzilla.redhat.com/show_bug.cgi?id=1149821REPORT
bugzilla.redhat.com/show_bug.cgi?id=1149824REPORT
bugzilla.redhat.com/show_bug.cgi?id=1149827REPORT
bugzilla.redhat.com/show_bug.cgi?id=1150705REPORT
bugzilla.redhat.com/show_bug.cgi?id=1150895REPORT
bugzilla.redhat.com/show_bug.cgi?id=1151607REPORT
bugzilla.redhat.com/show_bug.cgi?id=1151610REPORT
bugzilla.redhat.com/show_bug.cgi?id=1151613REPORT
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1821.jsonAdvisory
access.redhat.com/errata/RHSA-2014:1822Advisory
bugzilla.redhat.com/show_bug.cgi?id=1147624REPORT
bugzilla.redhat.com/show_bug.cgi?id=1147630REPORT
bugzilla.redhat.com/show_bug.cgi?id=1149799REPORT
bugzilla.redhat.com/show_bug.cgi?id=1149802REPORT

Showing 100 of 117. Use Open JSON for the complete list.

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities