CVE-2013-4517
Improper Input Validation in Apache Santuario XML Security
4.3 MediumFix available
CVE-2013-4517 is a medium vulnerability (CVSS 4.3) in Apache Santuario Xml Security For Java, published January 11, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.86%, the 95th percentile. Fixed in org.apache.santuario:xmlsec 1.5.6.
Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.
Exploit likelihood
8.86%Up 1.5 points since Feb 4, 2022
What each source reports
NVD Score used
Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.
- Record
CVE-2013-4517- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.
- Record
CVE-2013-4517- Updated
- 2026-11-02
EUVDEUVD-2022-2411 No score
Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.
- Record
EUVD-2022-2411- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4p4w-6h54-g885 No score
Improper Input Validation in Apache Santuario XML Security
Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.
- Record
GHSA-4p4w-6h54-g885- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.
- Record
CVE-2013-4517- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-4517 No score
Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.
- Record
DEBIAN-CVE-2013-4517- Updated
- 2026-11-02
OSVGHSA-4p4w-6h54-g885 No score
Improper Input Validation in Apache Santuario XML Security
Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.
- Record
GHSA-4p4w-6h54-g885- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVMGASA-2014-0558 No score
Updated xml-security packages fix CVE-2013-4517
Updated xml-security packages fixes security vulnerability:
Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures (CVE-2013-4517).
- Record
MGASA-2014-0558- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-4517 No score
Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.
- Record
UBUNTU-CVE-2013-4517- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.santuario:xmlsecMaven |
before 1.5.6 | 1.5.6 |
libxml-security-javaDebian:12 |
before 1.5.6-1 | 1.5.6-1 |
libxml-security-javaDebian:13 |
before 1.5.6-1 | 1.5.6-1 |
libxml-security-javaDebian:14 |
before 1.5.6-1 | 1.5.6-1 |
org.apache.santuario:xmlsecMaven |
before 1.5.6, plus listed versions 1.4.01.4.11.4.21.4.31.4.4 Show 10 moreShow less1.4.51.4.61.4.71.4.81.5.01.5.11.5.21.5.31.5.41.5.5 |
1.5.6 |
xml-securityMageia:4 |
before 1.5.7-1.mga4 | 1.5.7-1.mga4 |
jbossas-javadocsRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-3.Final_redhat_3.ep6.el5 | 0:7.3.1-3.Final_redhat_3.ep6.el5 |
hornetqRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:2.3.14-1.Final_redhat_1.1.ep6.el5 | 0:2.3.14-1.Final_redhat_1.1.ep6.el5 |
jacorb-jbossRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:2.3.2-13.redhat_6.1.ep6.el5 | 0:2.3.2-13.redhat_6.1.ep6.el5 |
jboss-as-appclientRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el5 | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
Show 135 moreShow less
| Package | Affected | Fixed |
|---|---|---|
jboss-as-cliRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-4.Final_redhat_3.1.ep6.el5 | 0:7.3.1-4.Final_redhat_3.1.ep6.el5 |
jboss-as-client-allRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-4.Final_redhat_3.1.ep6.el5 | 0:7.3.1-4.Final_redhat_3.1.ep6.el5 |
jboss-as-clusteringRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el5 | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
jboss-as-cmpRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-configadminRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-connectorRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-4.Final_redhat_3.1.ep6.el5 | 0:7.3.1-4.Final_redhat_3.1.ep6.el5 |
jboss-as-controllerRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el5 | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
jboss-as-controller-clientRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-core-securityRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-deployment-repositoryRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-deployment-scannerRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-domain-httpRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el5 | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
jboss-as-domain-managementRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el5 | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
jboss-as-eeRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el5 | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
jboss-as-ee-deploymentRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-ejb3Red Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el5 | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
jboss-as-embeddedRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-host-controllerRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el5 | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
jboss-as-jacorbRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el5 | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
jboss-as-jaxrRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-jaxrsRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-jdrRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-jmxRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el5 | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
jboss-as-jpaRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el5 | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
jboss-as-jsfRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-jsr77Red Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-loggingRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el5 | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
jboss-as-mailRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-management-client-contentRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-messagingRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el5 | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
jboss-as-modclusterRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-namingRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el5 | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
jboss-as-networkRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-osgiRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-4.Final_redhat_3.1.ep6.el5 | 0:7.3.1-4.Final_redhat_3.1.ep6.el5 |
jboss-as-osgi-configadminRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-4.Final_redhat_3.1.ep6.el5 | 0:7.3.1-4.Final_redhat_3.1.ep6.el5 |
jboss-as-osgi-serviceRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-platform-mbeanRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-pojoRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-process-controllerRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el5 | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
jboss-as-protocolRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-remotingRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el5 | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
jboss-as-sarRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-securityRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el5 | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
jboss-as-serverRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el5 | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
jboss-as-system-jmxRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-threadsRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-transactionsRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-as-versionRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-4.Final_redhat_3.1.ep6.el5 | 0:7.3.1-4.Final_redhat_3.1.ep6.el5 |
jboss-as-webRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el5 | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
jboss-as-webservicesRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el5 | 0:7.3.1-3.Final_redhat_3.1.ep6.el5 |
jboss-as-weldRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-4.Final_redhat_3.1.ep6.el5 | 0:7.3.1-4.Final_redhat_3.1.ep6.el5 |
jboss-as-xtsRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el5 | 0:7.3.1-2.Final_redhat_3.1.ep6.el5 |
jboss-logmanagerRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:1.5.2-1.Final_redhat_1.1.ep6.el5 | 0:1.5.2-1.Final_redhat_1.1.ep6.el5 |
jboss-marshallingRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:1.4.3-1.Final_redhat_1.1.ep6.el5 | 0:1.4.3-1.Final_redhat_1.1.ep6.el5 |
jboss-xnio-baseRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:3.0.9-1.GA_redhat_1.1.ep6.el5 | 0:3.0.9-1.GA_redhat_1.1.ep6.el5 |
jbossas-coreRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-5.Final_redhat_3.1.ep6.el5 | 0:7.3.1-5.Final_redhat_3.1.ep6.el5 |
jbossas-modules-eapRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.1-6.Final_redhat_3.1.ep6.el5 | 0:7.3.1-6.Final_redhat_3.1.ep6.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:7.3.0-1.Final_redhat_1.1.ep6.el5 | 0:7.3.0-1.Final_redhat_1.1.ep6.el5 |
nettyRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:3.6.7-1.Final_redhat_1.1.ep6.el5 | 0:3.6.7-1.Final_redhat_1.1.ep6.el5 |
picketboxRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:4.0.19-2.SP3_redhat_1.1.ep6.el5 | 0:4.0.19-2.SP3_redhat_1.1.ep6.el5 |
weld-coreRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:1.1.17-1.Final_redhat_1.1.ep6.el5 | 0:1.1.17-1.Final_redhat_1.1.ep6.el5 |
xml-securityRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:1.5.6-1.redhat_1.1.ep6.el5 | 0:1.5.6-1.redhat_1.1.ep6.el5 |
xmltoolingRed Hat:jboss_enterprise_application_platform:6::el5 |
before 0:1.3.4-5.redhat_3.1.ep6.el5 | 0:1.3.4-5.redhat_3.1.ep6.el5 |
jbossas-javadocsRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-3.Final_redhat_3.ep6.el6 | 0:7.3.1-3.Final_redhat_3.ep6.el6 |
hornetqRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:2.3.14-1.Final_redhat_1.1.ep6.el6 | 0:2.3.14-1.Final_redhat_1.1.ep6.el6 |
jacorb-jbossRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:2.3.2-13.redhat_6.1.ep6.el6 | 0:2.3.2-13.redhat_6.1.ep6.el6 |
jboss-as-appclientRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el6 | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
jboss-as-cliRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-4.Final_redhat_3.1.ep6.el6 | 0:7.3.1-4.Final_redhat_3.1.ep6.el6 |
jboss-as-client-allRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-4.Final_redhat_3.1.ep6.el6 | 0:7.3.1-4.Final_redhat_3.1.ep6.el6 |
jboss-as-clusteringRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el6 | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
jboss-as-cmpRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-configadminRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-connectorRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-4.Final_redhat_3.1.ep6.el6 | 0:7.3.1-4.Final_redhat_3.1.ep6.el6 |
jboss-as-controllerRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el6 | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
jboss-as-controller-clientRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-core-securityRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-deployment-repositoryRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-deployment-scannerRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-domain-httpRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el6 | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
jboss-as-domain-managementRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el6 | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
jboss-as-eeRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el6 | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
jboss-as-ee-deploymentRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-ejb3Red Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el6 | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
jboss-as-embeddedRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-host-controllerRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el6 | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
jboss-as-jacorbRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el6 | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
jboss-as-jaxrRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-jaxrsRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-jdrRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-jmxRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el6 | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
jboss-as-jpaRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el6 | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
jboss-as-jsfRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-jsr77Red Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-loggingRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el6 | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
jboss-as-mailRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-management-client-contentRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-messagingRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el6 | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
jboss-as-modclusterRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-namingRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el6 | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
jboss-as-networkRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-osgiRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-4.Final_redhat_3.1.ep6.el6 | 0:7.3.1-4.Final_redhat_3.1.ep6.el6 |
jboss-as-osgi-configadminRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-4.Final_redhat_3.1.ep6.el6 | 0:7.3.1-4.Final_redhat_3.1.ep6.el6 |
jboss-as-osgi-serviceRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-platform-mbeanRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-pojoRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-process-controllerRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el6 | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
jboss-as-protocolRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-remotingRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el6 | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
jboss-as-sarRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-securityRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el6 | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
jboss-as-serverRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el6 | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
jboss-as-system-jmxRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-threadsRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-transactionsRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-as-versionRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-4.Final_redhat_3.1.ep6.el6 | 0:7.3.1-4.Final_redhat_3.1.ep6.el6 |
jboss-as-webRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el6 | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
jboss-as-webservicesRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-3.Final_redhat_3.1.ep6.el6 | 0:7.3.1-3.Final_redhat_3.1.ep6.el6 |
jboss-as-weldRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-4.Final_redhat_3.1.ep6.el6 | 0:7.3.1-4.Final_redhat_3.1.ep6.el6 |
jboss-as-xtsRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-2.Final_redhat_3.1.ep6.el6 | 0:7.3.1-2.Final_redhat_3.1.ep6.el6 |
jboss-logmanagerRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:1.5.2-1.Final_redhat_1.1.ep6.el6 | 0:1.5.2-1.Final_redhat_1.1.ep6.el6 |
jboss-marshallingRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:1.4.3-1.Final_redhat_1.1.ep6.el6 | 0:1.4.3-1.Final_redhat_1.1.ep6.el6 |
jboss-xnio-baseRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:3.0.9-1.GA_redhat_1.1.ep6.el6 | 0:3.0.9-1.GA_redhat_1.1.ep6.el6 |
jbossas-coreRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-5.Final_redhat_3.1.ep6.el6 | 0:7.3.1-5.Final_redhat_3.1.ep6.el6 |
jbossas-modules-eapRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.1-6.Final_redhat_3.1.ep6.el6 | 0:7.3.1-6.Final_redhat_3.1.ep6.el6 |
jbosswebRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:7.3.0-1.Final_redhat_1.1.ep6.el6 | 0:7.3.0-1.Final_redhat_1.1.ep6.el6 |
nettyRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:3.6.7-1.Final_redhat_1.1.ep6.el6 | 0:3.6.7-1.Final_redhat_1.1.ep6.el6 |
picketboxRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:4.0.19-2.SP3_redhat_1.1.ep6.el6 | 0:4.0.19-2.SP3_redhat_1.1.ep6.el6 |
weld-coreRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:1.1.17-1.Final_redhat_1.1.ep6.el6 | 0:1.1.17-1.Final_redhat_1.1.ep6.el6 |
xml-securityRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:1.5.6-1.redhat_1.1.ep6.el6 | 0:1.5.6-1.redhat_1.1.ep6.el6 |
xmltoolingRed Hat:jboss_enterprise_application_platform:6::el6 |
before 0:1.3.4-5.redhat_3.1.ep6.el6 | 0:1.3.4-5.redhat_3.1.ep6.el6 |
xml-securityRed Hat:jboss_enterprise_application_platform:5::el4 |
before 0:1.5.6-3.ep5.el4 | 0:1.5.6-3.ep5.el4 |
xml-securityRed Hat:jboss_enterprise_application_platform:5::el5 |
before 0:1.5.6-3.ep5.el5 | 0:1.5.6-3.ep5.el5 |
xml-securityRed Hat:jboss_enterprise_application_platform:5::el6 |
before 0:1.5.6-3.el6 | 0:1.5.6-3.el6 |
xml-securityRed Hat:jboss_enterprise_web_platform:5::el5 |
before 0:1.5.6-3.ep5.el5 | 0:1.5.6-3.ep5.el5 |
xml-securityRed Hat:jboss_enterprise_web_platform:5::el6 |
before 0:1.5.6-3.el6 | 0:1.5.6-3.el6 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | affected | |
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
rhn.redhat.com/errata/RHSA-2014-1728.html
osvdb.org/101169
Show 66 moreShow less
tenable.com/security/tns-2018-15
exchange.xforce.ibmcloud.com/vulnerabilities/89891
seclists.org/fulldisclosure/2013/Dec/169
securitytracker.com/id/1029524
santuario.apache.org/secadv.data/cve-2013-4517.txt.asc
packetstormsecurity.com/files/124554/Java-XML-Signature-Denial-Of-Service-Attack.html
securityfocus.com/bid/64437
secunia.com/advisories/55639
lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2013-4517
github.com/apache/santuario-java/commit/a09b9042f7759d094f2d49f40fc7bcf145164b25
security-tracker.debian.org/tracker/CVE-2013-4517
advisories.mageia.org/MGASA-2014-0558.html
bugs.mageia.org/show_bug.cgi?id=14485
lists.fedoraproject.org/pipermail/package-announce/2014-November/142709.html
access.redhat.com/errata/RHSA-2014:0170
bugzilla.redhat.com/show_bug.cgi?id=1038643
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0170.json
cve.org/CVERecord?id=CVE-2013-4517
blog.sendsafely.com/post/69590974866/web-based-single-sign-on-and-the-dangers-of-saml-xml
ubuntu.com/security/CVE-2013-4517