Unscored severity · published Jan 21, 2015
CVE-2014-8152
Apache Santuario XML Security for Java 2.0.x before 2.0.3 allows remote attackers to bypass the streaming XML signature protection mechanism via a crafted XML document
–
CVSS
5.6%
EPSS
No
On KEV
Description
Apache Santuario XML Security for Java 2.0.x before 2.0.3 allows remote attackers to bypass the streaming XML signature protection mechanism via a crafted XML document.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.6% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SX
Santuario Xml Security For Java · Apache
2.0.0; 2.0.1; 2.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-8152
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-8152
Vendor Advisory
http://santuario.apache.org/secadv.data/CVE-2014-8152.txt.asc
seclists.org
http://seclists.org/oss-sec/2015/q1/181
www.securityfocus.com
http://www.securityfocus.com/bid/72115
www.securitytracker.com
http://www.securitytracker.com/id/1031556
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/99993
lists.apache.org
https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E
More from Santuario Xml Security For Java
7.5
CVE-2021-40690
Bypass of the secureValidation property
6.5
CVE-2023-44483
All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be…
5.5
CVE-2019-12400
In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of DocumentBuilders
–
CVE-2013-4517
Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type…
–
CVE-2013-2172
jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to…