CVE-2017-15691
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2017
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion (XXE) capability of various XML parsers. UIMA as part of its configuration and operation may read XML from various sources, which could be tainted in ways to cause inadvertent disclosure of local files or other internal content.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Apache UIMA
- Vendor
- Apache Software Foundation
- Product
- Apache UIMA
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| uimaj prior to 2.10.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| uimaj 3.0.0-xxx prior to 3.0.0-beta | affected | Unavailable | Unavailable | Unavailable | None listed |
| uima-as prior to 2.10.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| uimaFIT prior to 2.4.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| uimaDUCC prior to 2.2.2 | affected | Unavailable | Unavailable | Unavailable | None listed |