dom4jproject dom4j CVE-2020-10683 vulnerability in Dom4jproject and Other Products
Published on May 1, 2020

product logo product logo product logo product logo product logo product logo
dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j.

Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2020-10683

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2020-10683 are published in these products:

Dom4jproject Dom4j
 
NetApp Oncommand Api Services
 
NetApp Oncommand Workflow Automation
 
NetApp Snapcenter
 
NetApp Snapmanager
 
NetApp Snap Creator Framework
 
Oracle Primavera P6 Enterprise Project Portfolio Management
 
Oracle Retail Integration Bus
 
OpenSuse Leap
 
Oracle Rapid Planning
 
Oracle Agile Plm
 
Oracle Application Testing Suite
 
Oracle Banking Platform
 
Oracle Business Process Management Suite
 
Oracle Communications Application Session Controller
 
Oracle Communications Diameter Signaling Router
 
Oracle Communications Unified Inventory Management
 
Oracle Data Integrator
 
Oracle Endeca Information Discovery Integrator
 
Oracle Enterprise Data Quality
 
Oracle Enterprise Manager Base Platform
 
Oracle Financial Services Analytical Applications Infrastructure
 
Oracle Fusion Middleware
 
Oracle Health Sciences Empirica Signal
 
Oracle Health Sciences Information Manager
 
Oracle Jdeveloper
 
Oracle Retail Customer Management Segmentation Foundation
 
Oracle Retail Order Broker
 
Oracle Retail Price Management
 
Oracle Retail Xstore Point Of Service
 
Oracle Storagetek Tape Analytics Sw Tool
 
Oracle Utilities Framework
 
Oracle Webcenter Portal
 
Apache Freemarker
 
Canonical Ubuntu Linux
 
Oracle Documaker
 
Oracle Flexcube Core Banking
 
Oracle Insurance Policy Administration J2ee
 
Oracle Insurance Rules Palette
 
Oracle
 

Exploit Probability

EPSS
7.68%
Percentile
91.74%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.