Unrated severityNVD Advisory· Published Aug 11, 2015· Updated May 6, 2026
CVE-2015-1818
CVE-2015-1818
Description
XML external entity (XXE) vulnerability in the dashbuilder import facility (DocumentBuilders in org.jboss.dashboard.export.ImportManagerImpl) in Red Hat JBoss BPM Suite before 6.1.2 allows remote attackers to read arbitrary files, conduct server-side request forgery (SSRF) attacks, and have other unspecified impact via a crafted XML document.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- rhn.redhat.com/errata/RHSA-2015-1539.htmlnvdVendor Advisory
- rhn.redhat.com/errata/RHSA-2015-1704.htmlnvd
News mentions
0No linked articles in our index yet.