Apache : Security Vulnerabilities, CVEs, Published In 2014 (Information Leak) CVSS score >= 3
The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow remote attackers to embed arbitrary data into documents via crafted OLE objects.
Max CVSS
4.3
EPSS Score
0.21%
Published
2014-08-27
Updated
2022-02-07
Apache Cordova Android before 3.5.1 allows remote attackers to open and send data to arbitrary applications via a URL with a crafted URI scheme for an Android intent.
Max CVSS
4.3
EPSS Score
0.25%
Published
2014-11-15
Updated
2014-11-17
Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain "Tomcat internals" information by leveraging the presence of an untrusted web application with a context.xml, web.xml, *.jspx, *.tagx, or *.tld XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Max CVSS
4.3
EPSS Score
0.25%
Published
2014-02-26
Updated
2019-04-15
3 vulnerabilities found