Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-t2m7-8ay9-zyge
Vulnerability ID VCID-t2m7-8ay9-zyge
Aliases CVE-2013-4002
GHSA-7j4h-8wpf-rqfh
Summary
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-112 Missing XML Validation
CWE-20 Improper Input Validation
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
generic_textual HIGH http://lists.apple.com/archives/security-announce/2013/Oct/msg00001.html
generic_textual HIGH http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html
generic_textual HIGH http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html
generic_textual HIGH http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html
generic_textual HIGH http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html
generic_textual HIGH http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html
generic_textual HIGH http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html
generic_textual HIGH http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00010.html
generic_textual HIGH http://lists.opensuse.org/opensuse-updates/2013-11/msg00023.html
generic_textual HIGH http://marc.info/?l=bugtraq&m=138674031212883&w=2
generic_textual HIGH http://marc.info/?l=bugtraq&m=138674073720143&w=2
generic_textual HIGH http://rhn.redhat.com/errata/RHSA-2013-1059.html
generic_textual HIGH http://rhn.redhat.com/errata/RHSA-2013-1060.html
generic_textual HIGH http://rhn.redhat.com/errata/RHSA-2013-1081.html
generic_textual HIGH http://rhn.redhat.com/errata/RHSA-2013-1440.html
generic_textual HIGH http://rhn.redhat.com/errata/RHSA-2013-1447.html
generic_textual HIGH http://rhn.redhat.com/errata/RHSA-2013-1451.html
generic_textual HIGH http://rhn.redhat.com/errata/RHSA-2013-1505.html
generic_textual HIGH http://rhn.redhat.com/errata/RHSA-2014-1818.html
generic_textual HIGH http://rhn.redhat.com/errata/RHSA-2014-1821.html
generic_textual HIGH http://rhn.redhat.com/errata/RHSA-2014-1822.html
generic_textual HIGH http://rhn.redhat.com/errata/RHSA-2014-1823.html
generic_textual HIGH http://rhn.redhat.com/errata/RHSA-2015-0675.html
generic_textual HIGH http://rhn.redhat.com/errata/RHSA-2015-0720.html
generic_textual HIGH http://rhn.redhat.com/errata/RHSA-2015-0765.html
generic_textual HIGH http://rhn.redhat.com/errata/RHSA-2015-0773.html
generic_textual HIGH https://access.redhat.com/errata/RHSA-2014:0414
epss 0.07428 https://api.first.org/data/v1/epss?cve=CVE-2013-4002
epss 0.07428 https://api.first.org/data/v1/epss?cve=CVE-2013-4002
epss 0.07428 https://api.first.org/data/v1/epss?cve=CVE-2013-4002
generic_textual HIGH http://security.gentoo.org/glsa/glsa-201406-32.xml
generic_textual HIGH https://exchange.xforce.ibmcloud.com/vulnerabilities/85260
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-7j4h-8wpf-rqfh
generic_textual HIGH https://github.com/apache/xerces2-j
generic_textual HIGH https://github.com/apache/xerces2-j/commit/266e837852e0f0e3c8c1ad572b6fc4dbb4ded17
generic_textual HIGH https://issues.apache.org/jira/browse/XERCESJ-1679
generic_textual HIGH https://lists.apache.org/thread.html/49dc6702104a86ecbb40292dcd329ce9ae4c32b74733199ecab14a73@%3Cj-users.xerces.apache.org%3E
generic_textual HIGH https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E
generic_textual HIGH https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2013-4002
generic_textual HIGH http://support.apple.com/kb/HT5982
generic_textual HIGH http://svn.apache.org/viewvc/xerces/java/trunk/src/org/apache/xerces/impl/XMLScanner.java?r1=965250&r2=1499506&view=patch
generic_textual HIGH https://www.oracle.com/security-alerts/cpuapr2022.html
generic_textual HIGH https://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
generic_textual HIGH http://www-01.ibm.com/support/docview.wss?uid=swg1IC98015
generic_textual HIGH http://www-01.ibm.com/support/docview.wss?uid=swg21644197
generic_textual HIGH http://www-01.ibm.com/support/docview.wss?uid=swg21653371
generic_textual HIGH http://www-01.ibm.com/support/docview.wss?uid=swg21657539
generic_textual HIGH http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS13-025/index.html
generic_textual HIGH http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_ibm_filenet_content_manager_and_ibm_content_foundation_xml_4j_denial_of_service_attack_cve_2013_4002
generic_textual HIGH http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_July_2013
generic_textual HIGH http://www.ibm.com/support/docview.wss?uid=swg21648172
generic_textual HIGH http://www.ubuntu.com/usn/USN-2033-1
generic_textual HIGH http://www.ubuntu.com/usn/USN-2089-1
Reference id Reference type URL
http://lists.apple.com/archives/security-announce/2013/Oct/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00010.html
http://lists.opensuse.org/opensuse-updates/2013-11/msg00023.html
http://marc.info/?l=bugtraq&m=138674031212883&w=2
http://marc.info/?l=bugtraq&m=138674073720143&w=2
http://rhn.redhat.com/errata/RHSA-2013-1440.html
http://rhn.redhat.com/errata/RHSA-2013-1447.html
http://rhn.redhat.com/errata/RHSA-2013-1451.html
http://rhn.redhat.com/errata/RHSA-2013-1505.html
http://rhn.redhat.com/errata/RHSA-2014-1818.html
http://rhn.redhat.com/errata/RHSA-2014-1821.html
http://rhn.redhat.com/errata/RHSA-2014-1822.html
http://rhn.redhat.com/errata/RHSA-2014-1823.html
http://rhn.redhat.com/errata/RHSA-2015-0675.html
http://rhn.redhat.com/errata/RHSA-2015-0720.html
http://rhn.redhat.com/errata/RHSA-2015-0765.html
http://rhn.redhat.com/errata/RHSA-2015-0773.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4002.json
https://api.first.org/data/v1/epss?cve=CVE-2013-4002
https://exchange.xforce.ibmcloud.com/vulnerabilities/85260
https://github.com/apache/xerces2-j
https://github.com/apache/xerces2-j/commit/266e837852e0f0e3c8c1ad572b6fc4dbb4ded17
https://github.com/apache/xerces2-j/commit/628cbc7142ef9acfb61b8e571aab63504235849
https://issues.apache.org/jira/browse/XERCESJ-1679
https://lists.apache.org/thread.html/49dc6702104a86ecbb40292dcd329ce9ae4c32b74733199ecab14a73@%3Cj-users.xerces.apache.org%3E
https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E
https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E
http://support.apple.com/kb/HT5982
http://svn.apache.org/viewvc?view=revision&revision=1499506
http://svn.apache.org/viewvc/xerces/java/trunk/src/org/apache/xerces/impl/XMLScanner.java?r1=965250&r2=1499506&view=patch
https://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
http://www-01.ibm.com/support/docview.wss?uid=swg1IC98015
http://www-01.ibm.com/support/docview.wss?uid=swg21644197
http://www-01.ibm.com/support/docview.wss?uid=swg21653371
http://www-01.ibm.com/support/docview.wss?uid=swg21657539
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS13-025/index.html
http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_ibm_filenet_content_manager_and_ibm_content_foundation_xml_4j_denial_of_service_attack_cve_2013_4002
http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_July_2013
http://www.ibm.com/support/docview.wss?uid=swg21648172
http://www.ubuntu.com/usn/USN-2033-1
http://www.ubuntu.com/usn/USN-2089-1
1019176 https://bugzilla.redhat.com/show_bug.cgi?id=1019176
CVE-2013-4002 https://bugzilla.redhat.com/CVE-2013-4002
CVE-2013-4002 https://nvd.nist.gov/vuln/detail/CVE-2013-4002
GHSA-7j4h-8wpf-rqfh https://github.com/advisories/GHSA-7j4h-8wpf-rqfh
GLSA-201406-32 https://security.gentoo.org/glsa/201406-32
RHSA-2013:1059 https://access.redhat.com/errata/RHSA-2013:1059
RHSA-2013:1060 https://access.redhat.com/errata/RHSA-2013:1060
RHSA-2013:1081 https://access.redhat.com/errata/RHSA-2013:1081
RHSA-2013:1440 https://access.redhat.com/errata/RHSA-2013:1440
RHSA-2013:1447 https://access.redhat.com/errata/RHSA-2013:1447
RHSA-2013:1451 https://access.redhat.com/errata/RHSA-2013:1451
RHSA-2013:1505 https://access.redhat.com/errata/RHSA-2013:1505
RHSA-2014:0414 https://access.redhat.com/errata/RHSA-2014:0414
RHSA-2014:1319 https://access.redhat.com/errata/RHSA-2014:1319
RHSA-2014:1818 https://access.redhat.com/errata/RHSA-2014:1818
RHSA-2014:1821 https://access.redhat.com/errata/RHSA-2014:1821
RHSA-2014:1822 https://access.redhat.com/errata/RHSA-2014:1822
RHSA-2014:1823 https://access.redhat.com/errata/RHSA-2014:1823
RHSA-2015:0234 https://access.redhat.com/errata/RHSA-2015:0234
RHSA-2015:0235 https://access.redhat.com/errata/RHSA-2015:0235
RHSA-2015:0269 https://access.redhat.com/errata/RHSA-2015:0269
RHSA-2015:0675 https://access.redhat.com/errata/RHSA-2015:0675
RHSA-2015:0720 https://access.redhat.com/errata/RHSA-2015:0720
RHSA-2015:0765 https://access.redhat.com/errata/RHSA-2015:0765
RHSA-2015:0773 https://access.redhat.com/errata/RHSA-2015:0773
USN-2033-1 https://usn.ubuntu.com/2033-1/
USN-2089-1 https://usn.ubuntu.com/2089-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.91937
EPSS Score 0.07428
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-10T18:20:08.469060+00:00 ProjectKB MSRImporter Import https://raw.githubusercontent.com/SAP/project-kb/master/MSR2019/dataset/vulas_db_msr2019_release.csv 38.6.0