Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Redhat Subscribe
Filtered by product Drools
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-41411 1 Redhat 1 Drools 2022-06-28 7.5 HIGH 9.8 CRITICAL
drools <=7.59.x is affected by an XML External Entity (XXE) vulnerability in KieModuleMarshaller.java. The Validator class is not used correctly, resulting in the XXE injection vulnerability.
CVE-2014-8125 1 Redhat 2 Drools, Jbpm 2015-05-26 7.5 HIGH N/A
XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPMN2 file.