CVE-2014-3643

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

jersey: XXE via parameter entities not disabled by the jersey SAX parser

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-611

Affected software

VendorProductVersions
jerseyjerseythrough 2014-09-17

References

Timeline

Published
Dec 15, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2014

CVE-2014-36452.1arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.12 does not have an exit handler for the INVEPT instruction, which alloCVE-2014-36465.5arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which CVE-2014-36475.5arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly perform RIP changes, which allows guest OS CVE-2014-36487.5The simplepush server iterates through the application installations and pushes a notification to the server provided by deviceToken. But thCVE-2014-36496.1JBoss AeroGear has reflected XSS via the password fieldCVE-2014-36505.4Multiple persistent cross-site scripting (XSS) flaws were found in the way Aerogear handled certain user-supplied content. A remote attackerCVE-2014-36517.5JBoss KeyCloak before 1.0.3.Final allows remote attackers to cause a denial of service (resource consumption) via a large value in the size CVE-2014-36526.1JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL.CVE-2014-36534.3Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1 allows remote attackers to inject arbitrarCVE-2014-36544.3Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.5 and 5.6 allCVE-2014-36554.3JBoss KeyCloak is vulnerable to soft token deletion via CSRFCVE-2014-36566.1JBoss KeyCloak: XSS in login-status-iframe.html
CVE-2014-3643: High severity, CVSS 7.5 | Vulnix