Xerces2 Java

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-0881 Maven HIGH PATCH This Week

Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service (CPU consumption) via a crafted message to an XML service, which triggers hash table collisions. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Java Apache Xerces2 Java

NVD

CVSS 3.0

7.5

EPSS

2.1%

CVE-2013-4002 Maven HIGH PATCH This Week

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable.

Java Denial Of Service Apache Oracle IBM +14

NVD

CVSS 2.0

7.1

EPSS

5.6%

CVE-2012-0881 Maven

EPSS 2% CVSS 7.5

HIGH PATCH This Week

Denial Of Service Java Apache +1

NVD

CVE-2013-4002 Maven

EPSS 6% CVSS 7.1

HIGH PATCH This Week

Java Denial Of Service Apache +16

NVD