Security Advisory
CVE-2014-8125
7.5
Vulnerability Description
XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPMN2 file.
Published Date
April 21, 2015
Official Source
NIST NVD Advisory