CVE-2018-11761

—

CVSS 3.0

7.5 high

EPSS

9%p95

Published

Sep 19, 2018 (Sep 19, 2018)

Modified

Jun 17, 2026

Description

In Apache Tika 0.1 to 1.18, the XML parsers were not configured to limit entity expansion. They were therefore vulnerable to an entity expansion vulnerability which can lead to a denial of service attack.

Vendors: apache oracle
Products: tika, business process management suite
Weakness: CWE-611
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (8.6%)

In the news0 stories

No ingested article mentions this CVE yet.