Approved changes feed: RSS · Atom

cpe:2.3:a:eclipse:rdf4j:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEclipse (fa988180-604e-5c1f-93ea-65b5297000fc)
ProductRdf4J (61e0f533-9e85-5d83-a91c-5e8f41b0cdaa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/asanchez75/rdf4j purl2cpe 2026-06-01 10:15:02.943403
pkg:github/eclipse/rdf4j purl2cpe 2026-06-01 10:15:02.943406
pkg:maven/org.eclipse.rdf4j/rdf4j purl2cpe 2026-06-01 10:15:02.943409

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-20227 vulnerable 2026-06-03 14:38:38.781791 Details available
RDF4J 2.4.2 allows Directory Traversal via ../ in an entry in a ZIP archive.
Published: 2018-12-19T11:00:00.000Z
Updated: 2024-08-05T11:58:19.149Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000644 vulnerable 2026-06-03 14:37:52.722797 Details available
Eclipse RDF4j version < 2.4.0 Milestone 2 contains a XML External Entity (XXE) vulnerability in RDF4j XML parser parsing RDF files that can result in the disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted RDF file.
Published: 2018-08-20T19:00:00.000Z
Updated: 2024-09-16T20:31:48.162Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.