XPath Injection in Dom4j Project
CVE-2018-1000632
dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.
EPSS exploit prediction
EPSS: 0.066 (93.8th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 94th percentile — 93.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.066 · newest: 0.066 · change: 0.000
Affected products
- Dom4j Project
- NetApp Oncommand Workflow Automation
- NetApp Snapcenter
- NetApp Snap Creator Framework
- NetApp Snapmanager
- Oracle Flexcube Investor Servicing — versions 12.0.4, 12.1.0, 12.3.0
- Oracle Primavera P6 Enterprise Project Portfolio Management
- Oracle Rapid Planning — versions 12.1, 12.2
- Oracle Retail Integration Bus — versions 15.0, 16.0
- Oracle Utilities Framework — versions 2.2.0, 4.2.0.2.0, 4.2.0.3.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- lists.debian.org/debian-lts-announce/2018/09/msg00028.html (mailing-list, Mailing List, Third Party Advisory)
- access.redhat.com/errata/RHSA-2019:0364 (vendor-advisory, Third Party Advisory)
- access.redhat.com/errata/RHSA-2019:0362 (vendor-advisory, Third Party Advisory)
- access.redhat.com/errata/RHSA-2019:0365 (vendor-advisory, Third Party Advisory)
- access.redhat.com/errata/RHSA-2019:0380 (vendor-advisory, Third Party Advisory)
- lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535… (mailing-list)
- access.redhat.com/errata/RHSA-2019:1160 (vendor-advisory, Third Party Advisory)
- access.redhat.com/errata/RHSA-2019:1162 (vendor-advisory, Third Party Advisory)
- access.redhat.com/errata/RHSA-2019:1159 (vendor-advisory, Third Party Advisory)
- access.redhat.com/errata/RHSA-2019:1161 (vendor-advisory, Third Party Advisory)
Frequently asked questions
- What is CVE-2018-1000632?
- CVE-2018-1000632 is a high-severity vulnerability in Dom4j Project, classified under XML Injection (Blind XPath Injection). CVSS score: 7.5/10. Published 2018-08-20.
- How severe is CVE-2018-1000632?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2018-1000632 known to be exploited?
- 8 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.