CVE-2017-7464

CVE-2017-7464 describes a critical XML External Entity (XXE) vulnerability within the JAXP implementation used in Red Hat JBoss Enterprise Application Platform 7.0. This flaw allows an unauthenticated attacker to achieve Denial of Service (DoS), Server-Side Request Forgery (SSRF), or information disclosure by providing malicious XML content for parsing. With a CVSS v3 score of 9.8 (CRITICAL), it presents a severe risk due to its network-based attack vector and low attack complexity, leading to high impacts on confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.