CVE-2016-5002

XML external entity (XXE) vulnerability in the Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to conduct…

published October 27, 2017

CVSS
—
EPSS
8%
Percentile
94.9
In the wild
Unconfirmed
What it is

XML external entity (XXE) vulnerability in the Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted DTD.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08275 · 94.9th percentile
Published
2017-10-27T18:00Z
EPSS history
Timeline
  • 27 OCT 18:00Z
    XML external entity (XXE) vulnerability in the Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to conduct…
    cvelistv5