It was found that the JAXP implementation used in JBoss EAP 7.0 for XSLT processing is vulnerable to code injection.

Published 8 y ago 2018-06-27 · modified 4 mo ago 2026-06-17 · JSON

CVSS

9.0

v3.0 · CNA

CISA KEV

not known exploited

EPSS

2.8%

percentile 87%

Public exploits

none known

It was found that the JAXP implementation used in JBoss EAP 7.0 for XSLT processing is vulnerable to code injection. An attacker could use this flaw to cause remote code execution if they are able to provide XSLT content for parsing. Doing a transform in JAXP requires the use of a 'javax.xml.transform.TransformerFactory'. If the FEATURE_SECURE_PROCESSING feature is set to 'true', it mitigates this vulnerability.

Exploit prediction (EPSS)

2.83% probability of exploitation in the next 30 days, higher than 87% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
CNA	3.0	9.0	`CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H`
CNA	3.0	9.0	`CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H`
NVD	3.0	9.8	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
NVD	2.0	7.5	`AV:N/AC:L/Au:N/C:P/I:P/A:P`

Affected products

[UNKNOWN] jboss

Classification

Weakness

CWE-611 Improper Restriction of XML External Entity Reference
CWE-94 Improper Control of Generation of Code

References

bugzilla.redhat.com /show_bug.cgi?id=CVE-2017-7465 · x_refsource_CONFIRM, x_transferred
securityfocus.com /bid/97605 · vdb-entry, x_refsource_BID, x_transferred

Sources

CVE List: CVE-2017-7465
NVD: CVE-2017-7465

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.