VULNERABILITY INTELLIGENCE

CVE-2017-8315

CVSS score7.5 HIGH

EPSS probability1.63%

CISA KEVNot currently listed

Published2018-04-20

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit the vulnerability by implementing malicious code on Androidmanifest.xml.

Weakness classification

CWE-611: Improper Restriction of XML External Entity Reference

Primary references

cve@checkpoint.com — Permissions Required, Vendor Advisory
cve@checkpoint.com — Exploit, Technical Description, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Technical Description, Third Party Advisory