{"action":"Upgrade org.hornetq.rest:hornetq-rest to 2.5.0.Beta1 or later.","affected":[{"fixed":"2.5.0.Beta1","introduced":"0"}],"component":"org.hornetq.rest:hornetq-rest","cve_ids":["CVE-2014-3599"],"ecosystem":"Maven","epss":0.01203,"exploited":false,"fixed_versions":["2.5.0.Beta1"],"ghsa_id":"GHSA-xrh2-c3rm-35jr","id":"tcs_01M5N9JXE8DN0QAQS4ZD0CVTSE","modified_at":"2026-09-10T03:49:41.887656580Z","published_at":"2022-05-24T22:01:08Z","references":["https://osv.dev/vulnerability/GHSA-xrh2-c3rm-35jr","https://nvd.nist.gov/vuln/detail/CVE-2014-3599","https://github.com/hornetq/hornetq/commit/b3a63576371828d5f8e64ba7ccbcecb1da8111d2","https://access.redhat.com/security/cve/cve-2014-3599","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3599","https://github.com/hornetq/hornetq","https://github.com/victims/victims-cve-db/blob/master/database/java/2014/3599.yaml"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-xrh2-c3rm-35jr","url":"https://osv.dev/vulnerability/GHSA-xrh2-c3rm-35jr"}],"summary":"HornetQ REST vulnerable to Improper Restriction of XML External Entity Reference"}