← All advisories

High severity7.5NVD Advisory· Published Dec 15, 2019· Updated Jun 17, 2026

CVE-2014-3643

CVE-2014-3643

Description

jersey: XXE via parameter entities not disabled by the jersey SAX parser

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
com.sun.jersey:jersey-coreMaven	< 1.13	1.13

Affected products

2

ghsa-coords
pkg:maven/com.sun.jersey/jersey-core
Range: < 1.13
Jersey/Jerseyv5
Range: through 2014-09-17

Patches

Vulnerability mechanics

References

7

access.redhat.com/security/cve/cve-2014-3643nvdThird Party AdvisoryWEB
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party AdvisoryWEB
github.com/advisories/GHSA-5m48-vr54-vmh3ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2014-3643ghsaADVISORY
github.com/javaee/jersey-1.x/commit/49f1e5a6ac608ccb51939205e4739f328f2223e6ghsaWEB
www.oracle.com/security-alerts/cpujul2022.htmlnvdWEB
www.sourceclear.com/vulnerability-database/security/xml-external-entity-xxe/java/sid-22175ghsaWEB

News mentions

0

No linked articles in our index yet.