[{"CVE":"CVE-2019-9628","severity":"moderate","public_date":"2019-03-11T00:00:00Z","advisories":[],"bugzilla":"1695997","bugzilla_description":"CVE-2019-9628 xmltooling: XML parser class fails to trap exceptions on malformed XML declaration","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9628.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-0486","severity":"important","public_date":"2018-01-12T00:00:00Z","advisories":[],"bugzilla":"1534647","bugzilla_description":"CVE-2018-0486 xmltooling: impersonation attack and sensitive information disclosure in the Service Provider via crafted DTD","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0486.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","cvss3_score":"8.7"},{"CVE":"CVE-2015-0851","severity":"moderate","public_date":"2015-07-21T00:00:00Z","advisories":[],"bugzilla":"1248504","bugzilla_description":"CVE-2015-0851 xmltooling: incorrect processing of well-formed but invalid XML","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0851.json"},{"CVE":"CVE-2013-6440","severity":"moderate","public_date":"2013-12-11T00:00:00Z","advisories":["RHSA-2014:1995","RHSA-2014:0452","RHSA-2014:1290","RHSA-2014:0171","RHSA-2014:0172","RHSA-2014:1291","RHSA-2014:0170","RHSA-2014:0195"],"bugzilla":"1043332","bugzilla_description":"CVE-2013-6440 XMLTooling-J/OpenSAML Java: XML eXternal Entity (XXE) flaw in ParserPool and Decrypter","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-611","affected_packages":["jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el5","jbossas-javadocs-0:7.3.1-3.Final_redhat_3.ep6.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6440.json"}]