CVE-2011-1483: HP Network Node Manager I

Medium severity, CVSS 5.0. EPSS: 2.7% chance of exploitation in the next 30 days.

wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05, 4.3.CP05, and 5.1.0; JBoss Communications Platform 1.2.11 and 5.1.1; JBoss Enterprise BRMS Platform 5.1.0; and JBoss Enterprise Web Platform 5.1.1 does not properly handle recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted request containing an XML document with a DOCTYPE declaration and a large number of nested entity references, a similar issue to CVE-2003-1564.

Affected products

• HP Network Node Manager I: version 9.0 only; version 9.01 only; version 9.02 only; version 9.03 only; version 9.10 only
• Red Hat JBoss Communications Platform: version 1.2.11 only; version 5.1.1 only
• Red Hat JBoss Enterprise Application Platform: version 4.2.0 only; version 4.3.0 only; version 5.1.1 only
• Red Hat JBoss Enterprise Brms Platform: version 5.1.0 only
• Red Hat JBoss Enterprise Portal Platform: version 4.3.0 only; version 5.1.1 only
• Red Hat JBoss Enterprise Soa Platform: version 4.2.0 only; version 4.3.0 only; version 5.1.0 only
• Red Hat JBoss Enterprise Web Platform: version 5.1.1 only

Published 2013-07-29. Last modified 2026-06-16.