Every CVE Search/ Get API key

CVE-2013-4517

Improper Input Validation in Apache Santuario XML Security

4.3 MediumFix available

Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.

Exploit likelihood

8.86%Up 1.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.

Record
CVE-2013-4517
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-399
Updated
2026-11-02
CVE List No score

Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.

Record
CVE-2013-4517
Updated
2026-11-02
EUVDEUVD-2022-2411 No score

Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.

Record
EUVD-2022-2411
Updated
2026-11-03
GitHub AdvisoriesGHSA-4p4w-6h54-g885 No score

Improper Input Validation in Apache Santuario XML Security

Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.

Record
GHSA-4p4w-6h54-g885
Weakness
CWE-20
Updated
2026-11-02
OSV No score

Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.

Record
CVE-2013-4517
Updated
2026-11-02
OSVDEBIAN-CVE-2013-4517 No score

Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.

Record
DEBIAN-CVE-2013-4517
Updated
2026-11-02
OSVGHSA-4p4w-6h54-g885 No score

Improper Input Validation in Apache Santuario XML Security

Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.

Record
GHSA-4p4w-6h54-g885
Weakness
CWE-20
Updated
2026-11-02
OSVMGASA-2014-0558 No score

Updated xml-security packages fix CVE-2013-4517

Updated xml-security packages fixes security vulnerability:

Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures (CVE-2013-4517).

Record
MGASA-2014-0558
Updated
2026-11-02
OSVUBUNTU-CVE-2013-4517 No score

Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.

Record
UBUNTU-CVE-2013-4517
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
org.apache.santuario:xmlsec
Maven
 before 1.5.6
1.5.6
libxml-security-java
Debian:12
 before 1.5.6-1
1.5.6-1
libxml-security-java
Debian:13
 before 1.5.6-1
1.5.6-1
libxml-security-java
Debian:14
 before 1.5.6-1
1.5.6-1
org.apache.santuario:xmlsec
Maven
 before 1.5.6, plus listed versions
1.4.01.4.11.4.21.4.31.4.4
Show 10 moreShow less
1.4.51.4.61.4.71.4.81.5.01.5.11.5.21.5.31.5.41.5.5
1.5.6
xml-security
Mageia:4
 before 1.5.7-1.mga4
1.5.7-1.mga4
jbossas-javadocs
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.ep6.el5
0:7.3.1-3.Final_redhat_3.ep6.el5
hornetq
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:2.3.14-1.Final_redhat_1.1.ep6.el5
0:2.3.14-1.Final_redhat_1.1.ep6.el5
jacorb-jboss
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:2.3.2-13.redhat_6.1.ep6.el5
0:2.3.2-13.redhat_6.1.ep6.el5
jboss-as-appclient
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
Show 135 moreShow less
Affected packages
PackageAffectedFixed
jboss-as-cli
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el5
0:7.3.1-4.Final_redhat_3.1.ep6.el5
jboss-as-client-all
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el5
0:7.3.1-4.Final_redhat_3.1.ep6.el5
jboss-as-clustering
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-cmp
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-configadmin
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-connector
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el5
0:7.3.1-4.Final_redhat_3.1.ep6.el5
jboss-as-controller
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-controller-client
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-core-security
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-deployment-repository
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-deployment-scanner
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-domain-http
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-domain-management
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-ee
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-ee-deployment
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-ejb3
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-embedded
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-host-controller
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-jacorb
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-jaxr
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-jaxrs
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-jdr
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-jmx
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-jpa
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-jsf
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-jsr77
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-logging
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-mail
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-management-client-content
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-messaging
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-modcluster
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-naming
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-network
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-osgi
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el5
0:7.3.1-4.Final_redhat_3.1.ep6.el5
jboss-as-osgi-configadmin
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el5
0:7.3.1-4.Final_redhat_3.1.ep6.el5
jboss-as-osgi-service
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-platform-mbean
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-pojo
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-process-controller
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-protocol
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-remoting
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-sar
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-security
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-server
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-system-jmx
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-threads
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-transactions
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-version
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el5
0:7.3.1-4.Final_redhat_3.1.ep6.el5
jboss-as-web
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-webservices
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-weld
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el5
0:7.3.1-4.Final_redhat_3.1.ep6.el5
jboss-as-xts
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-logmanager
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:1.5.2-1.Final_redhat_1.1.ep6.el5
0:1.5.2-1.Final_redhat_1.1.ep6.el5
jboss-marshalling
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:1.4.3-1.Final_redhat_1.1.ep6.el5
0:1.4.3-1.Final_redhat_1.1.ep6.el5
jboss-xnio-base
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:3.0.9-1.GA_redhat_1.1.ep6.el5
0:3.0.9-1.GA_redhat_1.1.ep6.el5
jbossas-core
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-5.Final_redhat_3.1.ep6.el5
0:7.3.1-5.Final_redhat_3.1.ep6.el5
jbossas-modules-eap
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-6.Final_redhat_3.1.ep6.el5
0:7.3.1-6.Final_redhat_3.1.ep6.el5
jbossweb
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.0-1.Final_redhat_1.1.ep6.el5
0:7.3.0-1.Final_redhat_1.1.ep6.el5
netty
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:3.6.7-1.Final_redhat_1.1.ep6.el5
0:3.6.7-1.Final_redhat_1.1.ep6.el5
picketbox
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:4.0.19-2.SP3_redhat_1.1.ep6.el5
0:4.0.19-2.SP3_redhat_1.1.ep6.el5
weld-core
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:1.1.17-1.Final_redhat_1.1.ep6.el5
0:1.1.17-1.Final_redhat_1.1.ep6.el5
xml-security
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:1.5.6-1.redhat_1.1.ep6.el5
0:1.5.6-1.redhat_1.1.ep6.el5
xmltooling
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:1.3.4-5.redhat_3.1.ep6.el5
0:1.3.4-5.redhat_3.1.ep6.el5
jbossas-javadocs
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.ep6.el6
0:7.3.1-3.Final_redhat_3.ep6.el6
hornetq
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:2.3.14-1.Final_redhat_1.1.ep6.el6
0:2.3.14-1.Final_redhat_1.1.ep6.el6
jacorb-jboss
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:2.3.2-13.redhat_6.1.ep6.el6
0:2.3.2-13.redhat_6.1.ep6.el6
jboss-as-appclient
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-cli
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el6
0:7.3.1-4.Final_redhat_3.1.ep6.el6
jboss-as-client-all
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el6
0:7.3.1-4.Final_redhat_3.1.ep6.el6
jboss-as-clustering
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-cmp
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-configadmin
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-connector
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el6
0:7.3.1-4.Final_redhat_3.1.ep6.el6
jboss-as-controller
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-controller-client
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-core-security
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-deployment-repository
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-deployment-scanner
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-domain-http
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-domain-management
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-ee
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-ee-deployment
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-ejb3
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-embedded
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-host-controller
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-jacorb
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-jaxr
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-jaxrs
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-jdr
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-jmx
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-jpa
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-jsf
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-jsr77
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-logging
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-mail
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-management-client-content
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-messaging
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-modcluster
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-naming
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-network
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-osgi
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el6
0:7.3.1-4.Final_redhat_3.1.ep6.el6
jboss-as-osgi-configadmin
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el6
0:7.3.1-4.Final_redhat_3.1.ep6.el6
jboss-as-osgi-service
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-platform-mbean
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-pojo
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-process-controller
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-protocol
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-remoting
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-sar
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-security
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-server
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-system-jmx
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-threads
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-transactions
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-version
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el6
0:7.3.1-4.Final_redhat_3.1.ep6.el6
jboss-as-web
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-webservices
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-weld
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el6
0:7.3.1-4.Final_redhat_3.1.ep6.el6
jboss-as-xts
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-logmanager
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:1.5.2-1.Final_redhat_1.1.ep6.el6
0:1.5.2-1.Final_redhat_1.1.ep6.el6
jboss-marshalling
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:1.4.3-1.Final_redhat_1.1.ep6.el6
0:1.4.3-1.Final_redhat_1.1.ep6.el6
jboss-xnio-base
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:3.0.9-1.GA_redhat_1.1.ep6.el6
0:3.0.9-1.GA_redhat_1.1.ep6.el6
jbossas-core
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-5.Final_redhat_3.1.ep6.el6
0:7.3.1-5.Final_redhat_3.1.ep6.el6
jbossas-modules-eap
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-6.Final_redhat_3.1.ep6.el6
0:7.3.1-6.Final_redhat_3.1.ep6.el6
jbossweb
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.0-1.Final_redhat_1.1.ep6.el6
0:7.3.0-1.Final_redhat_1.1.ep6.el6
netty
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:3.6.7-1.Final_redhat_1.1.ep6.el6
0:3.6.7-1.Final_redhat_1.1.ep6.el6
picketbox
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:4.0.19-2.SP3_redhat_1.1.ep6.el6
0:4.0.19-2.SP3_redhat_1.1.ep6.el6
weld-core
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:1.1.17-1.Final_redhat_1.1.ep6.el6
0:1.1.17-1.Final_redhat_1.1.ep6.el6
xml-security
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:1.5.6-1.redhat_1.1.ep6.el6
0:1.5.6-1.redhat_1.1.ep6.el6
xmltooling
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:1.3.4-5.redhat_3.1.ep6.el6
0:1.3.4-5.redhat_3.1.ep6.el6
xml-security
Red Hat:jboss_enterprise_application_platform:5::el4
 before 0:1.5.6-3.ep5.el4
0:1.5.6-3.ep5.el4
xml-security
Red Hat:jboss_enterprise_application_platform:5::el5
 before 0:1.5.6-3.ep5.el5
0:1.5.6-3.ep5.el5
xml-security
Red Hat:jboss_enterprise_application_platform:5::el6
 before 0:1.5.6-3.el6
0:1.5.6-3.el6
xml-security
Red Hat:jboss_enterprise_web_platform:5::el5
 before 0:1.5.6-3.ep5.el5
0:1.5.6-3.ep5.el5
xml-security
Red Hat:jboss_enterprise_web_platform:5::el6
 before 0:1.5.6-3.el6
0:1.5.6-3.el6

History

History
RecordedChangedSources
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-4517 is a medium vulnerability (CVSS 4.3) in Apache Santuario Xml Security For Java, published January 11, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.86%, the 95th percentile. Fixed in org.apache.santuario:xmlsec 1.5.6.

References

Show 66 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open