● CVE — Critical
CVE-2019-0228
Vendorfedoraproject, oracle, apacheProductfedora, peoplesoft enterprise peopletools, webcenter sites, retail xstore point of service, pdfbox, communications session report manager, james, banking corporate lending process management, banking credit facilities process management, banking supply chain finance, banking trade finance process management, banking virtual account management, communications messaging server, hyperion financial reportingDiscoveredApr 17, 2019UpdatedNov 21, 2024
Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF.