CVE-2019-0228

Fixed upstream EPSS 9%

Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF.

Published 2019-04-17 · CVE record · OSV

Products: apache pdfbox, apache james, fedoraproject fedora, oracle banking_corporate_lending_process_management, oracle banking_credit_facilities_process_management, oracle banking_supply_chain_finance, oracle banking_trade_finance_process_management, oracle banking_virtual_account_management, oracle communications_messaging_server, oracle communications_session_report_manager, oracle hyperion_financial_reporting, oracle peoplesoft_enterprise_peopletools, oracle retail_xstore_point_of_service, oracle webcenter_sites

Fixed upstream