Vendor/product archive

apache / xml-rpc CVEs

Beta · best-effort

2 CVEs tagged to apache / xml-rpc — 1 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to apache vendor archive

CVE-2019-17570

Published Jan 23, 2020

An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2016-5002

Published Oct 27, 2017

XML external entity (XXE) vulnerability in the Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to conduct server-side request forg…

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1