{"schemaVersion":3,"id":"CVE-2018-11761","aliases":["SUSE-RU-2018:4018-1","SUSE-SU-2018:4011-1","UBUNTU-CVE-2018-11761","DEBIAN-CVE-2018-11761","GHSA-6jq2-789q-fff2"],"status":"published","duplicateOf":null,"title":null,"description":"In Apache Tika 0.1 to 1.18, the XML parsers were not configured to limit entity expansion. They were therefore vulnerable to an entity expansion vulnerability which can lead to a denial of service attack.","dates":{"published":"2018-09-19T14:00:00.000Z","modified":"2024-09-16T18:39:59.951Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Maven","score":7.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true}]},"epss":{"probability":0.0938,"percentile":0.95354,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0.8099999999999996,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.0857},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.07119,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0938,"percentile":0.95354}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.07119,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0857,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0938,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0938,"percentile":0.95354}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-611","name":"Improper Restriction of XML External Entity Reference","description":"The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/611.html"}],"affected":[{"vendor":"apache software foundation","product":"apache tika","name":"Apache Tika","label":"apache tika","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"0.1 to 1.18","noFixRecorded":false,"fixedIn":null}],"versionsText":"0.1 to 1.18","eol":null,"hubHref":"/vendor/apache_software_foundation/apache_tika"},{"vendor":"apache","product":"tika","name":"tika","label":"tika","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 0.1, ≤ 1.18","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 0.1, ≤ 1.18","eol":null,"hubHref":"/vendor/apache/tika"},{"vendor":"debian","product":"tika","name":"tika","label":"tika","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/tika","purlType":"deb","versions":[{"text":"< 1.20-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.20-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"tika","name":"tika","label":"tika","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/tika","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"org.apache.tika","product":"tika-core","name":"org.apache.tika:tika-core","label":"tika-core","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.apache.tika/tika-core","purlType":"maven","versions":[{"text":"≥ 0.1, < 1.19.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 0.1, < 1.19.1","eol":null,"hubHref":null},{"vendor":"oracle","product":"business_process_management_suite","name":"business process management suite","label":"business_process_management_suite","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"12.1.3.0.0","noFixRecorded":false,"fixedIn":null},{"text":"12.2.1.3.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.1.3.0.0 | 12.2.1.3.0","eol":null,"hubHref":"/vendor/oracle/business_process_management_suite"},{"vendor":"suse","product":"apache-mybatis&distro=SUSE Manager Server 3.2","name":"apache-mybatis","label":"apache-mybatis&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache-mybatis&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 3.2.3-3.3.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.3-3.3.3","eol":null,"hubHref":null},{"vendor":"suse","product":"cobbler&distro=SUSE Manager Server 3.2","name":"cobbler","label":"cobbler&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cobbler&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.6.6-6.10.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.6-6.10.3","eol":null,"hubHref":null},{"vendor":"suse","product":"hadoop&distro=SUSE Manager Server 3.2","name":"hadoop","label":"hadoop&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/hadoop&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 0.18.1-3.3.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.18.1-3.3.3","eol":null,"hubHref":null},{"vendor":"suse","product":"image-sync-formula&distro=SUSE Manager Server 3.2","name":"image-sync-formula","label":"image-sync-formula&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/image-sync-formula&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 0.1.1542287363.b8aa274-3.6.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.1.1542287363.b8aa274-3.6.3","eol":null,"hubHref":null},{"vendor":"suse","product":"lucene&distro=SUSE Manager Server 3.2","name":"lucene","label":"lucene&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/lucene&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.4.1-4.3.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.1-4.3.3","eol":{"isEol":null,"eolDate":null,"matchMethod":"alias_exact","cycle":null,"product":{"name":"apache-lucene","label":"Apache Lucene","category":"framework"}},"hubHref":null},{"vendor":"suse","product":"nekohtml&distro=SUSE Manager Server 3.2","name":"nekohtml","label":"nekohtml&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/nekohtml&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 1.9.21-3.3.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.9.21-3.3.3","eol":null,"hubHref":null},{"vendor":"suse","product":"nutch-core&distro=SUSE Manager Server 3.2","name":"nutch-core","label":"nutch-core&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/nutch-core&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 1.0.1-7.10.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.1-7.10.3","eol":null,"hubHref":null},{"vendor":"suse","product":"picocontainer&distro=SUSE Manager Server 3.2","name":"picocontainer","label":"picocontainer&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/picocontainer&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 1.3.7-3.3.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.7-3.3.3","eol":null,"hubHref":null},{"vendor":"suse","product":"python-susemanager-retail&distro=SUSE Manager Server 3.2","name":"python-susemanager-retail","label":"python-susemanager-retail&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-susemanager-retail&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 1.0.1542643545.8752d17-2.6.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.1542643545.8752d17-2.6.3","eol":null,"hubHref":null},{"vendor":"suse","product":"salt-netapi-client&distro=SUSE Manager Server 3.2","name":"salt-netapi-client","label":"salt-netapi-client&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/salt-netapi-client&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 0.15.0-4.3.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.15.0-4.3.3","eol":null,"hubHref":null},{"vendor":"suse","product":"saltboot-formula&distro=SUSE Manager Server 3.2","name":"saltboot-formula","label":"saltboot-formula&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltboot-formula&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 0.1.1542287363.b8aa274-3.6.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.1.1542287363.b8aa274-3.6.3","eol":null,"hubHref":null},{"vendor":"suse","product":"spacecmd&distro=SUSE Manager Server 3.2","name":"spacecmd","label":"spacecmd&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacecmd&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.25.7-3.9.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.25.7-3.9.3","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-branding&distro=SUSE Manager Server 3.2","name":"spacewalk-branding","label":"spacewalk-branding&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-branding&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.5.12-3.10.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.5.12-3.10.4","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-config&distro=SUSE Manager Server 3.2","name":"spacewalk-config","label":"spacewalk-config&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-config&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.5.5-3.10.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.5.5-3.10.3","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-java&distro=SUSE Manager Server 3.2","name":"spacewalk-java","label":"spacewalk-java&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-java&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.78.13-3.13.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.78.13-3.13.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-search&distro=SUSE Manager Server 3.2","name":"spacewalk-search","label":"spacewalk-search&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-search&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.3.7-3.12.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.3.7-3.12.3","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-setup&distro=SUSE Manager Server 3.2","name":"spacewalk-setup","label":"spacewalk-setup&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-setup&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.7.5-3.10.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.7.5-3.10.3","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-utils&distro=SUSE Manager Server 3.2","name":"spacewalk-utils","label":"spacewalk-utils&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-utils&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.18.3-3.3.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.18.3-3.3.3","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-web&distro=SUSE Manager Proxy 3.2","name":"spacewalk-web","label":"spacewalk-web&distro=SUSE Manager Proxy 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-web&distro=SUSE Manager Proxy 3.2","purlType":"rpm","versions":[{"text":"< 2.8.7.11-3.13.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.7.11-3.13.3","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-web&distro=SUSE Manager Server 3.2","name":"spacewalk-web","label":"spacewalk-web&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-web&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.7.11-3.13.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.7.11-3.13.3","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-docs_en&distro=SUSE Manager Server 3.2","name":"susemanager-docs_en","label":"susemanager-docs_en&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-docs_en&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 3.2-11.12.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2-11.12.3","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-frontend-libs&distro=SUSE Manager Server 3.2","name":"susemanager-frontend-libs","label":"susemanager-frontend-libs&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-frontend-libs&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 3.2.4-3.7.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.4-3.7.3","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-schema&distro=SUSE Manager Server 3.2","name":"susemanager-schema","label":"susemanager-schema&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-schema&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 3.2.15-3.13.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.15-3.13.3","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-sls&distro=SUSE Manager Server 3.2","name":"susemanager-sls","label":"susemanager-sls&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-sls&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 3.2.18-3.13.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.18-3.13.3","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-sync-data&distro=SUSE Manager Server 3.2","name":"susemanager-sync-data","label":"susemanager-sync-data&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-sync-data&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 3.2.10-3.9.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.10-3.9.3","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager&distro=SUSE Manager Server 3.2","name":"susemanager","label":"susemanager&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 3.2.14-3.13.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.14-3.13.3","eol":null,"hubHref":null},{"vendor":"suse","product":"tika-core&distro=SUSE Manager Server 3.2","name":"tika-core","label":"tika-core&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/tika-core&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 1.19.1-3.3.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.19.1-3.3.3","eol":null,"hubHref":null}],"affectedCount":33,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.securityfocus.com/bid/105514","label":"www.securityfocus.com/bid/105514","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory","WEB"]},{"url":"https://lists.apache.org/thread.html/5553e10bba5604117967466618f219c0cae710075819c70cfb3fb421%40%3Cdev.tika.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","label":"www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","hostname":"www.oracle.com","tags":["X Refsource MISC","Patch","Third Party Advisory","WEB"]},{"url":"https://www.suse.com/support/update/announcement//suse-ru-20184018-1/","label":"www.suse.com/support/update/announcement//suse-ru-20184018-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1041999","label":"bugzilla.suse.com/1041999","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1080474","label":"bugzilla.suse.com/1080474","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1083094","label":"bugzilla.suse.com/1083094","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1104487","label":"bugzilla.suse.com/1104487","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1105359","label":"bugzilla.suse.com/1105359","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1105724","label":"bugzilla.suse.com/1105724","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1106430","label":"bugzilla.suse.com/1106430","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1106626","label":"bugzilla.suse.com/1106626","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1107869","label":"bugzilla.suse.com/1107869","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1109235","label":"bugzilla.suse.com/1109235","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1110361","label":"bugzilla.suse.com/1110361","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1110625","label":"bugzilla.suse.com/1110625","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1111247","label":"bugzilla.suse.com/1111247","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1111249","label":"bugzilla.suse.com/1111249","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1111387","label":"bugzilla.suse.com/1111387","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1111497","label":"bugzilla.suse.com/1111497","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1111542","label":"bugzilla.suse.com/1111542","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1111810","label":"bugzilla.suse.com/1111810","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1111966","label":"bugzilla.suse.com/1111966","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1112163","label":"bugzilla.suse.com/1112163","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1112445","label":"bugzilla.suse.com/1112445","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1112754","label":"bugzilla.suse.com/1112754","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1113557","label":"bugzilla.suse.com/1113557","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1113747","label":"bugzilla.suse.com/1113747","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1114181","label":"bugzilla.suse.com/1114181","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1114362","label":"bugzilla.suse.com/1114362","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1114814","label":"bugzilla.suse.com/1114814","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1114991","label":"bugzilla.suse.com/1114991","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1115449","label":"bugzilla.suse.com/1115449","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1116517","label":"bugzilla.suse.com/1116517","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11761","label":"www.suse.com/security/cve/CVE-2018-11761","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20184011-1/","label":"www.suse.com/support/update/announcement/2018/suse-su-20184011-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-11761","label":"ubuntu.com/security/CVE-2018-11761","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.openwall.com/lists/oss-security/2018/09/19/4","label":"www.openwall.com/lists/oss-security/2018/09/19/4","hostname":"www.openwall.com","tags":["REPORT"]},{"url":"https://lists.apache.org/thread.html/5553e10bba5604117967466618f219c0cae710075819c70cfb3fb421@%3Cdev.tika.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["REPORT","WEB"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-11761","label":"www.cve.org/CVERecord?id=CVE-2018-11761","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-11761","label":"security-tracker.debian.org/tracker/CVE-2018-11761","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11761","label":"nvd.nist.gov/vuln/detail/CVE-2018-11761","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/advisories/GHSA-6jq2-789q-fff2","label":"github.com/advisories/GHSA-6jq2-789q-fff2","hostname":"github.com","tags":["Advisory"]},{"url":"https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E","label":"lists.apache.org/thread.html/…","hostname":"lists.apache.org","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2018-09-19T14:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-09-16T18:39:59.951Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":32,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T02:32:41.692Z","stale":false,"partial":false}}