CVE-2016-8739

HIGH · CVSS 7.5 EPSS 7.32%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-08-10 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2016-8739

Severity

HIGH

CVSS

7.5

EPSS

7.32%

Apache

Original NVD Description

The JAX-RS module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 provides a number of Atom JAX-RS MessageBodyReaders. These readers use Apache Abdera Parser which expands XML entities by default which represents a major XXE risk.