Search for packages
| purl | pkg:deb/debian/libxalan2-java@2.7.1-5%2Bdeb6u1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1psf-36k5-aaaa
Aliases: CVE-2014-0107 GHSA-rc2w-r4jq-7pfx |
The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass expected restrictions and load arbitrary classes or access external resources via a crafted (1) xalan:content-header, (2) xalan:entities, (3) xslt:content-header, or (4) xslt:entities property, or a Java property that is bound to the XSLT 1.0 system-property function. |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-21T13:59:48.542534+00:00 | Debian Oval Importer | Affected by | VCID-1psf-36k5-aaaa | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T09:01:33.033252+00:00 | Debian Oval Importer | Affected by | VCID-1psf-36k5-aaaa | https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 | 36.1.3 |
| 2025-06-20T19:33:10.293129+00:00 | Debian Oval Importer | Affected by | VCID-1psf-36k5-aaaa | None | 36.1.3 |
| 2025-06-08T13:11:04.994786+00:00 | Debian Oval Importer | Affected by | VCID-1psf-36k5-aaaa | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T06:53:56.640632+00:00 | Debian Oval Importer | Affected by | VCID-1psf-36k5-aaaa | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T02:48:25.398085+00:00 | Debian Oval Importer | Affected by | VCID-1psf-36k5-aaaa | https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 | 36.1.0 |
| 2025-06-07T13:29:04.050914+00:00 | Debian Oval Importer | Affected by | VCID-1psf-36k5-aaaa | None | 36.1.0 |
| 2025-04-12T18:58:48.464429+00:00 | Debian Oval Importer | Affected by | VCID-1psf-36k5-aaaa | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-08T05:26:25.166187+00:00 | Debian Oval Importer | Affected by | VCID-1psf-36k5-aaaa | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T01:15:36.193235+00:00 | Debian Oval Importer | Affected by | VCID-1psf-36k5-aaaa | https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 | 36.0.0 |
| 2025-04-07T12:04:33.228615+00:00 | Debian Oval Importer | Affected by | VCID-1psf-36k5-aaaa | None | 36.0.0 |