eap7-dom4j

Direct Vulnerabilities

Known vulnerabilities in the eap7-dom4j package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Improperly Implemented Security Check for Standard

<0:2.1.1-2.redhat_00001.1.el7eap
  • H
Race Condition

<0:2.1.1-2.redhat_00001.1.el7eap
  • H
Directory Traversal

<0:2.1.3-1.redhat_00001.1.el7eap
  • H
Improper Authorization

<0:2.1.3-1.redhat_00001.1.el7eap
  • H
Deserialization of Untrusted Data

<0:2.1.3-1.redhat_00001.1.el7eap
  • H
Exposed Dangerous Method or Function

<0:2.1.3-1.redhat_00001.1.el7eap
  • H
Session Fixation

<0:2.1.3-1.redhat_00001.1.el7eap
  • H
HTTP Request Smuggling

<0:2.1.3-1.redhat_00001.1.el7eap
  • H
Improper Input Validation

<0:2.1.3-1.redhat_00001.1.el7eap
  • H
SQL Injection

<0:2.1.3-1.redhat_00001.1.el7eap
  • M
Information Exposure

<0:2.1.1-1.redhat_00001.1.ep7.el7
  • M
Cross-site Scripting (XSS)

<0:2.1.1-1.redhat_00001.1.ep7.el7
  • H
Improper Validation of Syntactic Correctness of Input

<0:2.1.3-1.redhat_00001.1.el7eap
  • M
Information Exposure

<0:1.6.1-24.redhat_7.1.el7eap
  • H
Improper Resource Shutdown or Release

<0:2.1.3-1.redhat_00001.1.el7eap
  • H
Resource Exhaustion

<0:2.1.3-1.redhat_00001.1.el7eap
  • H
Allocation of Resources Without Limits or Throttling

<0:2.1.3-1.redhat_00001.1.el7eap
  • H
Cross-site Request Forgery (CSRF)

<0:2.1.1-2.redhat_00001.1.el7eap
  • H
XML External Entity (XXE) Injection

<0:2.1.1-2.redhat_00001.1.el7eap
  • H
Deserialization of Untrusted Data

<0:2.1.1-2.redhat_00001.1.el7eap
  • H
Deserialization of Untrusted Data

<0:2.1.1-2.redhat_00001.1.el7eap
  • H
Deserialization of Untrusted Data

<0:2.1.1-2.redhat_00001.1.el7eap
  • H
Static Code Injection

<0:2.1.3-1.redhat_00001.1.el7eap
  • H
Static Code Injection

<0:2.1.3-1.redhat_00001.1.el7eap
  • H
Improper Input Validation

<0:2.1.3-1.redhat_00001.1.el7eap
  • H
XML External Entity (XXE) Injection

<0:2.1.3-1.redhat_00001.1.el7eap
  • M
Arbitrary Argument Injection

<0:2.1.1-1.redhat_00001.1.ep7.el7
  • H
Deserialization of Untrusted Data

<0:2.1.3-1.redhat_00001.1.el7eap
  • H
Deserialization of Untrusted Data

<0:2.1.3-1.redhat_00001.1.el7eap
  • H
Deserialization of Untrusted Data

<0:2.1.3-1.redhat_00001.1.el7eap
  • H
Deserialization of Untrusted Data

<0:2.1.3-1.redhat_00001.1.el7eap