CVE-2017-7503
CriticalSummary
It was found that the Red Hat JBoss EAP 7.0.5 implementation of javax.xml.transform.TransformerFactory is vulnerable to XXE. An attacker could use this flaw to launch DoS or SSRF attacks, or read files from the server where EAP is deployed.
Risk Assessment
This vulnerability could lead to service disruption (DoS) or allow an attacker to access sensitive data on the server.
Recommendation
It is recommended to upgrade to the latest version of JBoss EAP to mitigate this vulnerability and implement appropriate security measures to protect against XXE attacks.
Original NVD description (English source)
It was found that the Red Hat JBoss EAP 7.0.5 implementation of javax.xml.transform.TransformerFactory is vulnerable to XXE. An attacker could use this flaw to launch DoS or SSRF attacks, or read files from the server where EAP is deployed.