CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.8. It affects Apache. It may be remotely exploitable.
CVE
CVE-2016-5002
Severity
HIGH
CVSS
7.8
EPSS
8.28%
Apache
Original NVD Description
XML external entity (XXE) vulnerability in the Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted DTD.
Related CVEs
Other vulnerabilities affecting the same vendor(s)