{
  "cveId": "CVE-2018-1000632",
  "url": "https://patchblox.com/security/cve/CVE-2018-1000632",
  "summary": "CVE-2018-1000632 is fixed in libdom4j-java on 1 platform, first by libdom4j-java 2.1.1-1, released January 16, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "libdom4j-java: dom4j version prior to version 2.1.1 contains a CWE-91: XML Injectionvulnerability in Class: Element",
  "description": "dom4j version prior to version 2.1.1 contains a CWE-91: XML Injectionvulnerability in Class: Element. Methods: addElement, addAttribute that canresult in an attacker tampering with XML documents through XML injection.This attack appear to be exploitable via an attacker specifying attributesor elements in the XML document. This vulnerability appears to have beenfixed in 2.1.1 or later.",
  "severity": "Low",
  "epss": 0.0657,
  "epssPercentile": 0.93867,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libdom4j-java",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "2.1.1-1",
      "fix": "libdom4j-java 2.1.1-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-libdom4j-java-2.1.1-1",
      "released": "2026-01-16T01:42:22Z"
    },
    {
      "platform": "linux",
      "product": "libdom4j-java",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2.1.1-1",
      "fix": "libdom4j-java 2.1.1-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libdom4j-java-2.1.1-1",
      "released": "2026-01-16T01:42:24Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}