https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2014-2228.htmlhttps://patchthecve.com/cve/CVE-2014-2228.htmlWed, 17 Jun 2026 00:06:15 +0000CRITICAL 9.8: The XStream extension in HP Fortify SCA before 2.2 RC3 allows remote attackers to execute arbitrary code via unsafe deserialization of XML messages.https://patchthecve.com/cve/CVE-2017-14949.htmlhttps://patchthecve.com/cve/CVE-2017-14949.htmlWed, 17 Jun 2026 01:07:02 +0000HIGH 7.5: Restlet Framework before 2.3.12 allows remote attackers to access arbitrary files via a crafted REST API HTTP request that conducts an XXE attack, because only general external entities (not parameter external entities) are properly considered. This is related to XmlRepresentation, DOMRepresentationhttps://patchthecve.com/cve/CVE-2017-14868.htmlhttps://patchthecve.com/cve/CVE-2017-14868.htmlWed, 17 Jun 2026 01:06:53 +0000HIGH 7.5: Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request. This affects use of the Jax-rs extension.