The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass expected restrictions and load arbitrary classes or access external resources via a crafted (1) xalan:content-header, (2) xalan:entities, (3) xslt:content-header, or (4) xslt:entities property, or a Java property that is bound to the XSLT 1.0 system-property function.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Xalan-java | Apache | * | 2.7.1 (including) |
| Xalan-java | Apache | 1.0.0 (including) | 1.0.0 (including) |
| Xalan-java | Apache | 2.0.0 (including) | 2.0.0 (including) |
| Xalan-java | Apache | 2.0.1 (including) | 2.0.1 (including) |
| Xalan-java | Apache | 2.1.0 (including) | 2.1.0 (including) |
| Xalan-java | Apache | 2.2.0 (including) | 2.2.0 (including) |
| Xalan-java | Apache | 2.4.0 (including) | 2.4.0 (including) |
| Xalan-java | Apache | 2.4.1 (including) | 2.4.1 (including) |
| Xalan-java | Apache | 2.5.0 (including) | 2.5.0 (including) |
| Xalan-java | Apache | 2.5.1 (including) | 2.5.1 (including) |
| Xalan-java | Apache | 2.5.2 (including) | 2.5.2 (including) |
| Xalan-java | Apache | 2.6.0 (including) | 2.6.0 (including) |
| Xalan-java | Apache | 2.7.0 (including) | 2.7.0 (including) |
| Fuse ESB Enterprise 7.1.0 | RedHat | * | |
| Fuse Management Console 7.1.0 | RedHat | * | |
| Fuse MQ Enterprise 7.1.0 | RedHat | * | |
| JBoss Enterprise BRMS Platform 5.3 | RedHat | xalan-j2 | * |
| Red Hat Enterprise Linux 5 | RedHat | xalan-j2-0:2.7.0-6jpp.2 | * |
| Red Hat Enterprise Linux 6 | RedHat | xalan-j2-0:2.7.0-9.9.el6_5 | * |
| Red Hat JBoss A-MQ 6.1 | RedHat | * | |
| Red Hat JBoss BPMS 6.0 | RedHat | xalan-j2 | * |
| Red Hat JBoss BPMS 6.0 | RedHat | xalan-j2 | * |
| Red Hat JBoss BRMS 6.0 | RedHat | xalan-j2 | * |
| Red Hat JBoss BRMS 6.0 | RedHat | xalan-j2 | * |
| Red Hat JBoss Enterprise Application Platform 5.2 | RedHat | xalan-j2 | * |
| Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 | RedHat | xalan-j2-0:2.7.1-12_patch_08.ep5.el4 | * |
| Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 | RedHat | xalan-j2-0:2.7.1-12_patch_08.ep5.el5 | * |
| Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 | RedHat | xalan-j2-0:2.7.1-12_patch_08.ep5.el6 | * |
| Red Hat JBoss Enterprise Application Platform 6.2 | RedHat | xalan-j2 | * |
| Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 5 | RedHat | xalan-j2-eap6-0:2.7.1-9.redhat_7.1.ep6.el5 | * |
| Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 6 | RedHat | xalan-j2-eap6-0:2.7.1-9.redhat_7.1.ep6.el6 | * |
| Red Hat JBoss Fuse 6.1 | RedHat | * | |
| Red Hat JBoss Fuse Service Works 6.0 | RedHat | xalan-j2 | * |
| Red Hat JBoss Portal 5.2 | RedHat | xalan-j2 | * |
| Red Hat JBoss Portal 6.2 | RedHat | xalan-j2 | * |
| Red Hat JBoss SOA Platform 5.3 | RedHat | xalan-j2 | * |
| Libxalan2-java | Ubuntu | lucid | * |
| Libxalan2-java | Ubuntu | precise | * |
| Libxalan2-java | Ubuntu | quantal | * |
| Libxalan2-java | Ubuntu | saucy | * |
| Libxalan2-java | Ubuntu | upstream | * |