Xalan Java

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-34169 Jul 19, 18:15 Maven HIGH POC PATCH THREAT Act Now

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 11.0%.

RCE Apache Java Debian Oracle +19

NVD VulDB

CVSS 3.1

7.5

EPSS

11.0%

CVE-2014-0107 Apr 15, 23:13 Maven HIGH PATCH This Week

The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.

Privilege Escalation Apache Java Oracle Webcenter Sites +1

NVD VulDB

CVSS 2.0

7.5

EPSS

8.8%

CVE-2022-34169 Maven

EPSS 11% CVSS 7.5

HIGH POC PATCH THREAT Act Now

RCE Apache Java +21

NVD VulDB

CVE-2014-0107 Maven

EPSS 9% CVSS 7.5

HIGH PATCH This Week

Privilege Escalation Apache Java +3

NVD VulDB