Approved changes feed: RSS · Atom

cpe:2.3:a:eclipse:rdf4j:2.4.0:m2:*:*:*:*:*:*

part: a version: 2.4.0 update: m2

VendorEclipse (fa988180-604e-5c1f-93ea-65b5297000fc)
ProductRdf4J (61e0f533-9e85-5d83-a91c-5e8f41b0cdaa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/asanchez75/rdf4j purl2cpe 2026-06-01 10:15:02.957520
pkg:github/eclipse/rdf4j purl2cpe 2026-06-01 10:15:02.957522
pkg:maven/org.eclipse.rdf4j/rdf4j purl2cpe 2026-06-01 10:15:02.957523

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1000644 vulnerable 2026-06-03 14:37:52.724887 Details available
Eclipse RDF4j version < 2.4.0 Milestone 2 contains a XML External Entity (XXE) vulnerability in RDF4j XML parser parsing RDF files that can result in the disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted RDF file.
Published: 2018-08-20T19:00:00.000Z
Updated: 2024-09-16T20:31:48.162Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.