CVE-2015-0254 on Ubuntu 14.04 LTS (trusty) - medium.
Description:
Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) or (2) JSTL XML tag.