CVE:CVE-2018-1000632
CNNVD:CNNVD-201808-625
dom4j是一款支持DOM、SAX、JAXP和Java平台的用于处理XML文件的开源框架。
dom4j 2.1.1之前版本中的Class: Element存在安全漏洞，该漏洞源于程序没有验证输入。攻击者可通过指定XML文档中的属性或元素利用该漏洞执行篡改操作。
solution:Upgrade dom4j_project dom4j to a higher version than 2.0.3,2.1.1,and avoid the version [2.0.0,2.0.3),[2.1.0,2.1.1); Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade oracle flexcube_investor_servicing to a higher version than 12.0.4,12.1.0,12.3.0,12.4.0,14.0.0,and avoid the version 12.0.4,12.1.0,12.3.0,12.4.0,14.0.0; Upgrade oracle primavera_p6_enterprise_project_portfolio_management to a higher version than 16.2.20.1,17.12.17.1,18.8.19.0,19.12.6.0,and avoid the version [16.1.0.0,16.2.20.1],[17.1.0.0,17.12.17.1],[18.1.0.0,18.8.19.0],[19.12.0.0,19.12.6.0]; Upgrade oracle rapid_planning to a higher version than 12.1,12.2,and avoid the version 12.1,12.2; Upgrade oracle retail_integration_bus to a higher version than 15.0,16.0,and avoid the version 15.0,16.0; Upgrade oracle utilities_framework to a higher version than 4.3.0.6.0,2.2.0,4.2.0.2.0,4.2.0.3.0,4.4.0.0.0,4.4.0.2,and avoid the version [4.3.0.2.0,4.3.0.6.0],2.2.0,4.2.0.2.0,4.2.0.3.0,4.4.0.0.0,4.4.0.2; Upgrade redhat satellite to a higher version than 6.6,and avoid the version 6.6; Upgrade redhat satellite_capsule to a higher version than 6.6,and avoid the version 6.6; Upgrade redhat jboss_enterprise_application_platform to a higher version than 6.0.0,6.4.0,7.1.0,and avoid the version 6.0.0,6.4.0,7.1.0; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp snap_creator_framework to a higher version than -; Upgrade netapp snapcenter to a higher version than -; Upgrade netapp snapmanager to a higher version than -