Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:jboss_data_virtualization:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductJboss Data Virtualization (dcbed15e-5e21-5339-a532-a213dcaba5ec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jboss-container-images/jboss-datavirt-6-openshift-image purl2cpe 2026-06-01 10:12:53.018375

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0171 vulnerable 2026-06-08 05:05:12.010579 Details available
XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.
Published: 2015-01-15T15:00:00.000Z
Updated: 2024-08-06T09:05:39.067Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0170 vulnerable 2026-06-08 05:05:12.008775 Details available
Teiid before 8.4.3 and before 8.7 and Red Hat JBoss Data Virtualization 6.0.0 before patch 3 allows remote attackers to read arbitrary files via a crafted request to a REST endpoint, related to an XML External Entity (XXE) issue.
Published: 2014-09-30T14:00:00.000Z
Updated: 2024-08-06T09:05:39.161Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.