Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.apache.tika/tika-core@1.3
Typemaven
Namespaceorg.apache.tika
Nametika-core
Version1.3
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version3.2.2
Latest_non_vulnerable_version3.2.2
Affected_by_vulnerabilities
0
url VCID-2yb7-v3m7-3ffz
vulnerability_id VCID-2yb7-v3m7-3ffz
summary 
Uncontrolled Resource Consumption
A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1950.json
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1950.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-1950
reference_id
reference_type
scores
0
value 0.00417
scoring_system epss
scoring_elements 0.62142
published_at 2026-06-05T12:55:00Z
1
value 0.00417
scoring_system epss
scoring_elements 0.62093
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-1950
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1950
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1950
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/apache/tika
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tika
5
reference_url https://lists.apache.org/thread.html/r463b1a67817ae55fe022536edd6db34e8f9636971188430cbcf8a8dd%40%3Cdev.tika.apache.org%3E
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r463b1a67817ae55fe022536edd6db34e8f9636971188430cbcf8a8dd%40%3Cdev.tika.apache.org%3E
6
reference_url https://lists.debian.org/debian-lts-announce/2020/03/msg00035.html
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2020/03/msg00035.html
7
reference_url https://usn.ubuntu.com/4564-1
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/4564-1
8
reference_url https://www.oracle.com/security-alerts/cpujul2020.html
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpujul2020.html
9
reference_url https://www.oracle.com/security-alerts/cpuoct2020.html
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpuoct2020.html
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1822759
reference_id 1822759
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1822759
11
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=954303
reference_id 954303
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=954303
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-1950
reference_id CVE-2020-1950
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-1950
13
reference_url https://github.com/advisories/GHSA-3h29-52vh-pqgr
reference_id GHSA-3h29-52vh-pqgr
reference_type
scores
url https://github.com/advisories/GHSA-3h29-52vh-pqgr
14
reference_url https://access.redhat.com/errata/RHSA-2020:5568
reference_id RHSA-2020:5568
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:5568
15
reference_url https://usn.ubuntu.com/4564-1/
reference_id USN-4564-1
reference_type
scores
url https://usn.ubuntu.com/4564-1/
16
reference_url https://usn.ubuntu.com/7529-1/
reference_id USN-7529-1
reference_type
scores
url https://usn.ubuntu.com/7529-1/
fixed_packages
0
url pkg:maven/org.apache.tika/tika-core@1.24
purl pkg:maven/org.apache.tika/tika-core@1.24
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-42ad-sh45-7fev
1
vulnerability VCID-8qc9-3mxe-8ydp
2
vulnerability VCID-en59-hstj-8kc1
3
vulnerability VCID-q319-5s6s-aqab
4
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.24
aliases CVE-2020-1950, GHSA-3h29-52vh-pqgr
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2yb7-v3m7-3ffz
1
url VCID-42ad-sh45-7fev
vulnerability_id VCID-42ad-sh45-7fev
summary 
Loop with Unreachable Exit Condition (Infinite Loop)
A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-28657.json
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-28657.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-28657
reference_id
reference_type
scores
0
value 0.00221
scoring_system epss
scoring_elements 0.44847
published_at 2026-06-05T12:55:00Z
1
value 0.00221
scoring_system epss
scoring_elements 0.44778
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-28657
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28657
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28657
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://lists.apache.org/thread.html/r4cbc3f6981cd0a1a482531df9d44e4c42a7f63342a7ba78b7bff8a1b@%3Cnotifications.james.apache.org%3E
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r4cbc3f6981cd0a1a482531df9d44e4c42a7f63342a7ba78b7bff8a1b@%3Cnotifications.james.apache.org%3E
5
reference_url https://lists.apache.org/thread.html/r915add4aa52c60d1b5cf085039cfa73a98d7fae9673374dfd7744b5a%40%3Cdev.tika.apache.org%3E
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r915add4aa52c60d1b5cf085039cfa73a98d7fae9673374dfd7744b5a%40%3Cdev.tika.apache.org%3E
6
reference_url https://security.netapp.com/advisory/ntap-20210507-0004
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20210507-0004
7
reference_url https://www.oracle.com/security-alerts/cpuapr2022.html
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpuapr2022.html
8
reference_url https://www.oracle.com/security-alerts/cpuoct2021.html
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpuoct2021.html
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1944881
reference_id 1944881
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1944881
10
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986805
reference_id 986805
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986805
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-28657
reference_id CVE-2021-28657
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-28657
12
reference_url https://github.com/advisories/GHSA-567x-m4wm-87v8
reference_id GHSA-567x-m4wm-87v8
reference_type
scores
url https://github.com/advisories/GHSA-567x-m4wm-87v8
fixed_packages
0
url pkg:maven/org.apache.tika/tika-core@1.26
purl pkg:maven/org.apache.tika/tika-core@1.26
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8qc9-3mxe-8ydp
1
vulnerability VCID-en59-hstj-8kc1
2
vulnerability VCID-q319-5s6s-aqab
3
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.26
aliases CVE-2021-28657, GHSA-567x-m4wm-87v8
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-42ad-sh45-7fev
2
url VCID-7d9k-ekje-fbe1
vulnerability_id VCID-7d9k-ekje-fbe1
summary 
Loop with Unreachable Exit Condition (Infinite Loop)
A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika `ChmParser`.
references
0
reference_url https://access.redhat.com/errata/RHSA-2018:2669
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:2669
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1339.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1339.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1339
reference_id
reference_type
scores
0
value 0.04517
scoring_system epss
scoring_elements 0.89358
published_at 2026-06-05T12:55:00Z
1
value 0.04517
scoring_system epss
scoring_elements 0.89339
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1339
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1339
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1339
4
reference_url https://github.com/apache/tika
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tika
5
reference_url https://github.com/apache/tika/commit/1b6ca3685c196cfd89f5f95c19cc919ce10c5aff#diff-43f8cbe58aaab159ce88bd95fafc46dd
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tika/commit/1b6ca3685c196cfd89f5f95c19cc919ce10c5aff#diff-43f8cbe58aaab159ce88bd95fafc46dd
6
reference_url https://lists.apache.org/thread.html/4d2cb5c819401bb075e2a1130e0d14f0404a136541a6f91da0225828@%3Cdev.tika.apache.org%3E
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/4d2cb5c819401bb075e2a1130e0d14f0404a136541a6f91da0225828@%3Cdev.tika.apache.org%3E
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1572424
reference_id 1572424
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1572424
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=900000
reference_id 900000
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=900000
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-1339
reference_id CVE-2018-1339
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-1339
10
reference_url https://github.com/advisories/GHSA-p699-3wgc-7h72
reference_id GHSA-p699-3wgc-7h72
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-p699-3wgc-7h72
fixed_packages
0
url pkg:maven/org.apache.tika/tika-core@1.18
purl pkg:maven/org.apache.tika/tika-core@1.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-2yxn-wffn-x7gr
2
vulnerability VCID-42ad-sh45-7fev
3
vulnerability VCID-8qc9-3mxe-8ydp
4
vulnerability VCID-98bu-vqgb-x7a8
5
vulnerability VCID-c7gc-egj2-2yb9
6
vulnerability VCID-dc2n-xs2k-abbz
7
vulnerability VCID-en59-hstj-8kc1
8
vulnerability VCID-j6j1-yp44-hqdt
9
vulnerability VCID-jyak-stwf-f3gw
10
vulnerability VCID-q319-5s6s-aqab
11
vulnerability VCID-r5jk-9f46-rygg
12
vulnerability VCID-uj1b-pk9r-ryhz
13
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.18
aliases CVE-2018-1339, GHSA-p699-3wgc-7h72
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7d9k-ekje-fbe1
3
url VCID-7snd-ac5u-bydy
vulnerability_id VCID-7snd-ac5u-bydy
summary 
Deserialization of Untrusted Data
Apache Tika allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes `JMatIO` to do native deserialization.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6809.json
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6809.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-6809
reference_id
reference_type
scores
0
value 0.07049
scoring_system epss
scoring_elements 0.91658
published_at 2026-06-05T12:55:00Z
1
value 0.07049
scoring_system epss
scoring_elements 0.91646
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-6809
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6809
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6809
3
reference_url https://dist.apache.org/repos/dist/release/tika/CHANGES-1.14.txt
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://dist.apache.org/repos/dist/release/tika/CHANGES-1.14.txt
4
reference_url http://seclists.org/bugtraq/2016/Nov/40
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://seclists.org/bugtraq/2016/Nov/40
5
reference_url https://github.com/apache/tika
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tika
6
reference_url https://github.com/apache/tika/commit/8a68b5d474205cc91cbbb610d4a1c05af57f0610
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tika/commit/8a68b5d474205cc91cbbb610d4a1c05af57f0610
7
reference_url https://lists.apache.org/thread.html/91eb639ef619b9a26b40020ca6732e7dbe457f7322ed5f1df49e411a@%3Cdev.nutch.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/91eb639ef619b9a26b40020ca6732e7dbe457f7322ed5f1df49e411a@%3Cdev.nutch.apache.org%3E
8
reference_url https://lists.apache.org/thread.html/d2375da29d89e679abf5d845db76d6f798fdc6f7d44f2c788e8a0fb9@%3Cuser.nutch.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/d2375da29d89e679abf5d845db76d6f798fdc6f7d44f2c788e8a0fb9@%3Cuser.nutch.apache.org%3E
9
reference_url https://lists.apache.org/thread.html/e414754a6c57ce7194b731e211cd6b2cbb41f2c7000e3fb9c6b6ec78@%3Cdev.lucene.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/e414754a6c57ce7194b731e211cd6b2cbb41f2c7000e3fb9c6b6ec78@%3Cdev.lucene.apache.org%3E
10
reference_url https://lists.apache.org/thread.html/r2f6f6c130b12b7332f323f74d031072b1517065ce28a22346791ffb6@%3Cissues.lucene.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r2f6f6c130b12b7332f323f74d031072b1517065ce28a22346791ffb6@%3Cissues.lucene.apache.org%3E
11
reference_url https://lists.apache.org/thread.html/rfd3646bb724b66b1a9ddef69e692da2b7a727a8799551c78eedf0a0f@%3Cissues.lucene.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rfd3646bb724b66b1a9ddef69e692da2b7a727a8799551c78eedf0a0f@%3Cissues.lucene.apache.org%3E
12
reference_url http://www.securityfocus.com/bid/94247
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/94247
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1394156
reference_id 1394156
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1394156
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-6809
reference_id CVE-2016-6809
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-6809
15
reference_url https://github.com/advisories/GHSA-j8g6-2wh7-6439
reference_id GHSA-j8g6-2wh7-6439
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-j8g6-2wh7-6439
fixed_packages
0
url pkg:maven/org.apache.tika/tika-core@1.14
purl pkg:maven/org.apache.tika/tika-core@1.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-2yxn-wffn-x7gr
2
vulnerability VCID-42ad-sh45-7fev
3
vulnerability VCID-7d9k-ekje-fbe1
4
vulnerability VCID-8qc9-3mxe-8ydp
5
vulnerability VCID-98bu-vqgb-x7a8
6
vulnerability VCID-c7gc-egj2-2yb9
7
vulnerability VCID-dc2n-xs2k-abbz
8
vulnerability VCID-j6j1-yp44-hqdt
9
vulnerability VCID-jyak-stwf-f3gw
10
vulnerability VCID-q319-5s6s-aqab
11
vulnerability VCID-r5jk-9f46-rygg
12
vulnerability VCID-uj1b-pk9r-ryhz
13
vulnerability VCID-uyg4-mswu-s3f5
14
vulnerability VCID-x3y9-rbfc-47b8
15
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.14
aliases CVE-2016-6809, GHSA-j8g6-2wh7-6439
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7snd-ac5u-bydy
4
url VCID-8qc9-3mxe-8ydp
vulnerability_id VCID-8qc9-3mxe-8ydp
summary The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we found a separate, new regex DoS in a different regex in the StandardsExtractingContentHandler. These are now fixed in 1.28.4 and 2.4.1.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-33879
reference_id
reference_type
scores
0
value 0.00027
scoring_system epss
scoring_elements 0.07949
published_at 2026-06-04T12:55:00Z
1
value 0.00027
scoring_system epss
scoring_elements 0.07981
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-33879
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33879
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33879
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://lists.apache.org/thread/wfno8mf5nlcvbs78z93q9thgrm30wwfh
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread/wfno8mf5nlcvbs78z93q9thgrm30wwfh
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-33879
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-33879
5
reference_url https://security.netapp.com/advisory/ntap-20220812-0004
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20220812-0004
6
reference_url https://security.netapp.com/advisory/ntap-20220812-0004/
reference_id
reference_type
scores
url https://security.netapp.com/advisory/ntap-20220812-0004/
7
reference_url http://www.openwall.com/lists/oss-security/2022/06/27/5
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2022/06/27/5
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1015002
reference_id 1015002
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1015002
9
reference_url https://github.com/advisories/GHSA-6q8v-2hvm-fx37
reference_id GHSA-6q8v-2hvm-fx37
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6q8v-2hvm-fx37
10
reference_url https://usn.ubuntu.com/7529-1/
reference_id USN-7529-1
reference_type
scores
url https://usn.ubuntu.com/7529-1/
fixed_packages
0
url pkg:maven/org.apache.tika/tika-core@1.28.4
purl pkg:maven/org.apache.tika/tika-core@1.28.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-q319-5s6s-aqab
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.28.4
1
url pkg:maven/org.apache.tika/tika-core@2.4.1
purl pkg:maven/org.apache.tika/tika-core@2.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-q319-5s6s-aqab
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@2.4.1
aliases CVE-2022-33879, GHSA-6q8v-2hvm-fx37
risk_score 1.5
exploitability 0.5
weighted_severity 3.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8qc9-3mxe-8ydp
5
url VCID-98bu-vqgb-x7a8
vulnerability_id VCID-98bu-vqgb-x7a8
summary 
Improper Restriction of XML External Entity Reference
In Apache Tika, the XML parsers were not configured to limit entity expansion. They were therefore vulnerable to an entity expansion vulnerability which can lead to a DoS.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11761.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11761.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-11761
reference_id
reference_type
scores
0
value 0.11027
scoring_system epss
scoring_elements 0.93574
published_at 2026-06-04T12:55:00Z
1
value 0.11027
scoring_system epss
scoring_elements 0.93584
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-11761
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11761
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11761
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/apache/tika/commit/4e67928412ad56333d400f3728ecdb59d07d9d63
reference_id
reference_type
scores
url https://github.com/apache/tika/commit/4e67928412ad56333d400f3728ecdb59d07d9d63
5
reference_url https://lists.apache.org/thread.html/5553e10bba5604117967466618f219c0cae710075819c70cfb3fb421@%3Cdev.tika.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/5553e10bba5604117967466618f219c0cae710075819c70cfb3fb421@%3Cdev.tika.apache.org%3E
6
reference_url https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E
7
reference_url https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
8
reference_url http://www.securityfocus.com/bid/105514
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/105514
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1632462
reference_id 1632462
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1632462
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-11761
reference_id CVE-2018-11761
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-11761
11
reference_url https://github.com/advisories/GHSA-6jq2-789q-fff2
reference_id GHSA-6jq2-789q-fff2
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-6jq2-789q-fff2
fixed_packages
0
url pkg:maven/org.apache.tika/tika-core@1.19.1
purl pkg:maven/org.apache.tika/tika-core@1.19.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-2yxn-wffn-x7gr
2
vulnerability VCID-42ad-sh45-7fev
3
vulnerability VCID-8qc9-3mxe-8ydp
4
vulnerability VCID-dc2n-xs2k-abbz
5
vulnerability VCID-en59-hstj-8kc1
6
vulnerability VCID-q319-5s6s-aqab
7
vulnerability VCID-r5jk-9f46-rygg
8
vulnerability VCID-uj1b-pk9r-ryhz
9
vulnerability VCID-yt8m-g5bf-wkf7
10
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.19.1
aliases CVE-2018-11761, GHSA-6jq2-789q-fff2
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-98bu-vqgb-x7a8
6
url VCID-b19y-wyyt-4ff9
vulnerability_id VCID-b19y-wyyt-4ff9
summary 
Improper Restriction of XML External Entity Reference
Apache Tika does not properly initialize the XML parser or choose handlers, which might allow remote attackers to conduct XML External Entity (XXE) attacks via vectors involving (1) spreadsheets in OOXML files and (2) XMP metadata in PDF and other file formats, a related issue to CVE-2016-2175.
references
0
reference_url http://rhn.redhat.com/errata/RHSA-2017-0248.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2017-0248.html
1
reference_url http://rhn.redhat.com/errata/RHSA-2017-0249.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2017-0249.html
2
reference_url http://rhn.redhat.com/errata/RHSA-2017-0272.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2017-0272.html
3
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4434.json
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4434.json
4
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-4434
reference_id
reference_type
scores
0
value 0.00415
scoring_system epss
scoring_elements 0.61979
published_at 2026-06-04T12:55:00Z
1
value 0.00415
scoring_system epss
scoring_elements 0.62027
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-4434
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4434
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4434
6
reference_url https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E
7
reference_url https://mail-archives.apache.org/mod_mbox/tika-dev/201605.mbox/%3C1705136517.1175366.1464278135251.JavaMail.yahoo%40mail.yahoo.com%3E
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://mail-archives.apache.org/mod_mbox/tika-dev/201605.mbox/%3C1705136517.1175366.1464278135251.JavaMail.yahoo%40mail.yahoo.com%3E
8
reference_url http://www.securityfocus.com/archive/1/538500/100/0/threaded
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/archive/1/538500/100/0/threaded
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1340386
reference_id 1340386
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1340386
10
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=825501
reference_id 825501
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=825501
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-4434
reference_id CVE-2016-4434
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-4434
12
reference_url https://github.com/advisories/GHSA-4xr4-4c65-hj7f
reference_id GHSA-4xr4-4c65-hj7f
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-4xr4-4c65-hj7f
13
reference_url https://access.redhat.com/errata/RHSA-2017:0248
reference_id RHSA-2017:0248
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:0248
14
reference_url https://access.redhat.com/errata/RHSA-2017:0249
reference_id RHSA-2017:0249
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:0249
15
reference_url https://access.redhat.com/errata/RHSA-2017:0272
reference_id RHSA-2017:0272
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:0272
fixed_packages
0
url pkg:maven/org.apache.tika/tika-core@1.13
purl pkg:maven/org.apache.tika/tika-core@1.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-2yxn-wffn-x7gr
2
vulnerability VCID-42ad-sh45-7fev
3
vulnerability VCID-7d9k-ekje-fbe1
4
vulnerability VCID-7snd-ac5u-bydy
5
vulnerability VCID-8qc9-3mxe-8ydp
6
vulnerability VCID-98bu-vqgb-x7a8
7
vulnerability VCID-c7gc-egj2-2yb9
8
vulnerability VCID-dc2n-xs2k-abbz
9
vulnerability VCID-j6j1-yp44-hqdt
10
vulnerability VCID-jyak-stwf-f3gw
11
vulnerability VCID-q319-5s6s-aqab
12
vulnerability VCID-r5jk-9f46-rygg
13
vulnerability VCID-uj1b-pk9r-ryhz
14
vulnerability VCID-uyg4-mswu-s3f5
15
vulnerability VCID-x3y9-rbfc-47b8
16
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.13
aliases CVE-2016-4434, GHSA-4xr4-4c65-hj7f
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b19y-wyyt-4ff9
7
url VCID-c7gc-egj2-2yb9
vulnerability_id VCID-c7gc-egj2-2yb9
summary 
Improper Restriction of XML External Entity Reference
Tika reuses SAXParsers and calls `reset()` after each parse; the parser ignores entity expansion limits after the first parse.
references
0
reference_url https://access.redhat.com/errata/RHSA-2019:3892
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:3892
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11796.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11796.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-11796
reference_id
reference_type
scores
0
value 0.0394
scoring_system epss
scoring_elements 0.88565
published_at 2026-06-05T12:55:00Z
1
value 0.0394
scoring_system epss
scoring_elements 0.88547
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-11796
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/apache/tika
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tika
5
reference_url https://lists.apache.org/thread.html/88de8350cda9b184888ec294c813c5bd8a2081de8fd3666f8904bc05@%3Cdev.tika.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/88de8350cda9b184888ec294c813c5bd8a2081de8fd3666f8904bc05@%3Cdev.tika.apache.org%3E
6
reference_url https://security.netapp.com/advisory/ntap-20190903-0002
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20190903-0002
7
reference_url https://security.netapp.com/advisory/ntap-20190903-0002/
reference_id
reference_type
scores
url https://security.netapp.com/advisory/ntap-20190903-0002/
8
reference_url http://www.securityfocus.com/bid/105585
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/105585
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1639090
reference_id 1639090
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1639090
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-11796
reference_id CVE-2018-11796
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-11796
11
reference_url https://github.com/advisories/GHSA-h8q5-g2cj-qr5h
reference_id GHSA-h8q5-g2cj-qr5h
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-h8q5-g2cj-qr5h
fixed_packages
0
url pkg:maven/org.apache.tika/tika-core@1.19.1
purl pkg:maven/org.apache.tika/tika-core@1.19.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-2yxn-wffn-x7gr
2
vulnerability VCID-42ad-sh45-7fev
3
vulnerability VCID-8qc9-3mxe-8ydp
4
vulnerability VCID-dc2n-xs2k-abbz
5
vulnerability VCID-en59-hstj-8kc1
6
vulnerability VCID-q319-5s6s-aqab
7
vulnerability VCID-r5jk-9f46-rygg
8
vulnerability VCID-uj1b-pk9r-ryhz
9
vulnerability VCID-yt8m-g5bf-wkf7
10
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.19.1
aliases CVE-2018-11796, GHSA-h8q5-g2cj-qr5h
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-c7gc-egj2-2yb9
8
url VCID-j6j1-yp44-hqdt
vulnerability_id VCID-j6j1-yp44-hqdt
summary 
Path Traversal
In a rare edge case where a user does not specify an extract directory on the commandline (`--extract-dir=`) and the input file has an embedded file with an absolute path, tika-app would overwrite that file.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11762.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11762.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-11762
reference_id
reference_type
scores
0
value 0.00866
scoring_system epss
scoring_elements 0.75521
published_at 2026-06-05T12:55:00Z
1
value 0.00866
scoring_system epss
scoring_elements 0.75492
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-11762
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11762
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11762
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/apache/tika/commit/a09d853dbed712f644e274b497cce254f3189d57
reference_id
reference_type
scores
url https://github.com/apache/tika/commit/a09d853dbed712f644e274b497cce254f3189d57
5
reference_url https://lists.apache.org/thread.html/ab2e1af38975f5fc462ba89b517971ef892ec3d06bee12ea2258895b@%3Cdev.tika.apache.org%3E
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/ab2e1af38975f5fc462ba89b517971ef892ec3d06bee12ea2258895b@%3Cdev.tika.apache.org%3E
6
reference_url http://www.securityfocus.com/bid/105515
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/105515
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1632469
reference_id 1632469
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1632469
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-11762
reference_id CVE-2018-11762
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-11762
9
reference_url https://github.com/advisories/GHSA-w6g3-v46q-5p28
reference_id GHSA-w6g3-v46q-5p28
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-w6g3-v46q-5p28
fixed_packages
0
url pkg:maven/org.apache.tika/tika-core@1.19
purl pkg:maven/org.apache.tika/tika-core@1.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-2yxn-wffn-x7gr
2
vulnerability VCID-42ad-sh45-7fev
3
vulnerability VCID-8qc9-3mxe-8ydp
4
vulnerability VCID-98bu-vqgb-x7a8
5
vulnerability VCID-c7gc-egj2-2yb9
6
vulnerability VCID-dc2n-xs2k-abbz
7
vulnerability VCID-en59-hstj-8kc1
8
vulnerability VCID-q319-5s6s-aqab
9
vulnerability VCID-r5jk-9f46-rygg
10
vulnerability VCID-uj1b-pk9r-ryhz
11
vulnerability VCID-yt8m-g5bf-wkf7
12
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.19
aliases CVE-2018-11762, GHSA-w6g3-v46q-5p28
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j6j1-yp44-hqdt
9
url VCID-jyak-stwf-f3gw
vulnerability_id VCID-jyak-stwf-f3gw
summary 
Loop with Unreachable Exit Condition (Infinite Loop)
In Apache Tikato, a carefully crafted file can trigger an infinite loop in the `IptcAnpaParser`.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8017.json
reference_id
reference_type
scores
0
value 2.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8017.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-8017
reference_id
reference_type
scores
0
value 0.02108
scoring_system epss
scoring_elements 0.84414
published_at 2026-06-04T12:55:00Z
1
value 0.02108
scoring_system epss
scoring_elements 0.84438
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-8017
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8017
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8017
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/apache/tika
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tika
5
reference_url https://github.com/apache/tika/commit/62926cae31a02d4f23d21148435804b96c543cc
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tika/commit/62926cae31a02d4f23d21148435804b96c543cc
6
reference_url https://github.com/apache/tika/commit/8a6a9e1344f5b10ebfa1a189dc3c30d0da2b9d4
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tika/commit/8a6a9e1344f5b10ebfa1a189dc3c30d0da2b9d4
7
reference_url https://lists.apache.org/thread.html/72df7a3f0dda49a912143a1404b489837a11f374dfd1961061873a91@%3Cdev.tika.apache.org%3E
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/72df7a3f0dda49a912143a1404b489837a11f374dfd1961061873a91@%3Cdev.tika.apache.org%3E
8
reference_url http://www.securityfocus.com/bid/105513
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/105513
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1632466
reference_id 1632466
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1632466
10
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=914643
reference_id 914643
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=914643
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-8017
reference_id CVE-2018-8017
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-8017
12
reference_url https://github.com/advisories/GHSA-j53j-gmr9-h8g3
reference_id GHSA-j53j-gmr9-h8g3
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-j53j-gmr9-h8g3
fixed_packages
0
url pkg:maven/org.apache.tika/tika-core@1.19
purl pkg:maven/org.apache.tika/tika-core@1.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-2yxn-wffn-x7gr
2
vulnerability VCID-42ad-sh45-7fev
3
vulnerability VCID-8qc9-3mxe-8ydp
4
vulnerability VCID-98bu-vqgb-x7a8
5
vulnerability VCID-c7gc-egj2-2yb9
6
vulnerability VCID-dc2n-xs2k-abbz
7
vulnerability VCID-en59-hstj-8kc1
8
vulnerability VCID-q319-5s6s-aqab
9
vulnerability VCID-r5jk-9f46-rygg
10
vulnerability VCID-uj1b-pk9r-ryhz
11
vulnerability VCID-yt8m-g5bf-wkf7
12
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.19
aliases CVE-2018-8017, GHSA-j53j-gmr9-h8g3
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jyak-stwf-f3gw
10
url VCID-uj1b-pk9r-ryhz
vulnerability_id VCID-uj1b-pk9r-ryhz
summary 
Loop with Unreachable Exit Condition (Infinite Loop)
A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-1951
reference_id
reference_type
scores
0
value 0.0021
scoring_system epss
scoring_elements 0.43485
published_at 2026-06-05T12:55:00Z
1
value 0.0021
scoring_system epss
scoring_elements 0.43413
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-1951
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1951
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1951
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://github.com/apache/tika
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tika
4
reference_url https://lists.apache.org/thread.html/rd8c1b42bd0e31870d804890b3f00b13d837c528f7ebaf77031323172%40%3Cdev.tika.apache.org%3E
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rd8c1b42bd0e31870d804890b3f00b13d837c528f7ebaf77031323172%40%3Cdev.tika.apache.org%3E
5
reference_url https://lists.debian.org/debian-lts-announce/2020/03/msg00035.html
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2020/03/msg00035.html
6
reference_url https://usn.ubuntu.com/4564-1
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/4564-1
7
reference_url https://www.oracle.com/security-alerts/cpujul2020.html
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpujul2020.html
8
reference_url https://www.oracle.com/security-alerts/cpuoct2020.html
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpuoct2020.html
9
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=954302
reference_id 954302
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=954302
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-1951
reference_id CVE-2020-1951
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-1951
11
reference_url https://github.com/advisories/GHSA-3264-3fm9-fg44
reference_id GHSA-3264-3fm9-fg44
reference_type
scores
url https://github.com/advisories/GHSA-3264-3fm9-fg44
12
reference_url https://usn.ubuntu.com/4564-1/
reference_id USN-4564-1
reference_type
scores
url https://usn.ubuntu.com/4564-1/
13
reference_url https://usn.ubuntu.com/7529-1/
reference_id USN-7529-1
reference_type
scores
url https://usn.ubuntu.com/7529-1/
fixed_packages
0
url pkg:maven/org.apache.tika/tika-core@1.24
purl pkg:maven/org.apache.tika/tika-core@1.24
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-42ad-sh45-7fev
1
vulnerability VCID-8qc9-3mxe-8ydp
2
vulnerability VCID-en59-hstj-8kc1
3
vulnerability VCID-q319-5s6s-aqab
4
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.24
aliases CVE-2020-1951, GHSA-3264-3fm9-fg44
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uj1b-pk9r-ryhz
11
url VCID-x3y9-rbfc-47b8
vulnerability_id VCID-x3y9-rbfc-47b8
summary 
Loop with Unreachable Exit Condition (Infinite Loop)
A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika `BPGParser`.
references
0
reference_url https://access.redhat.com/errata/RHSA-2018:2669
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:2669
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1338.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1338.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1338
reference_id
reference_type
scores
0
value 0.03002
scoring_system epss
scoring_elements 0.86848
published_at 2026-06-05T12:55:00Z
1
value 0.03002
scoring_system epss
scoring_elements 0.86826
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1338
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1338
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1338
4
reference_url https://lists.apache.org/thread.html/4d20c5748fb9f836653bc78a1bad991ba8485d82a1e821f70b641932@%3Cdev.tika.apache.org%3E
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/4d20c5748fb9f836653bc78a1bad991ba8485d82a1e821f70b641932@%3Cdev.tika.apache.org%3E
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1572421
reference_id 1572421
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1572421
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-1338
reference_id CVE-2018-1338
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-1338
7
reference_url https://github.com/advisories/GHSA-5mf7-26mw-3rqr
reference_id GHSA-5mf7-26mw-3rqr
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-5mf7-26mw-3rqr
fixed_packages
0
url pkg:maven/org.apache.tika/tika-core@1.18
purl pkg:maven/org.apache.tika/tika-core@1.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-2yxn-wffn-x7gr
2
vulnerability VCID-42ad-sh45-7fev
3
vulnerability VCID-8qc9-3mxe-8ydp
4
vulnerability VCID-98bu-vqgb-x7a8
5
vulnerability VCID-c7gc-egj2-2yb9
6
vulnerability VCID-dc2n-xs2k-abbz
7
vulnerability VCID-en59-hstj-8kc1
8
vulnerability VCID-j6j1-yp44-hqdt
9
vulnerability VCID-jyak-stwf-f3gw
10
vulnerability VCID-q319-5s6s-aqab
11
vulnerability VCID-r5jk-9f46-rygg
12
vulnerability VCID-uj1b-pk9r-ryhz
13
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.18
aliases CVE-2018-1338, GHSA-5mf7-26mw-3rqr
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-x3y9-rbfc-47b8
12
url VCID-zj8z-ja31-mkcr
vulnerability_id VCID-zj8z-ja31-mkcr
summary tika-core: incomplete fix for CVE-2022-30126
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-30973.json
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-30973.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-30973
reference_id
reference_type
scores
0
value 0.0025
scoring_system epss
scoring_elements 0.48449
published_at 2026-06-05T12:55:00Z
1
value 0.0025
scoring_system epss
scoring_elements 0.48387
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-30973
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://github.com/advisories/GHSA-rpjm-422r-95mh
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-rpjm-422r-95mh
4
reference_url https://github.com/apache/tika
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tika
5
reference_url https://github.com/apache/tika/commit/a36711610fa1f6f5ba0f594803415af795e0b265
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tika/commit/a36711610fa1f6f5ba0f594803415af795e0b265
6
reference_url https://github.com/apache/tika/commit/e76302196ebcafb7b51fce37fbe8256e6c0fbc51
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tika/commit/e76302196ebcafb7b51fce37fbe8256e6c0fbc51
7
reference_url https://lists.apache.org/thread/gqvb5t4p7tmdpl0y5bdbf72pgxj04h7p
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread/gqvb5t4p7tmdpl0y5bdbf72pgxj04h7p
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-30973
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-30973
9
reference_url https://security.netapp.com/advisory/ntap-20220722-0004
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20220722-0004
10
reference_url https://security.netapp.com/advisory/ntap-20220722-0004/
reference_id
reference_type
scores
url https://security.netapp.com/advisory/ntap-20220722-0004/
11
reference_url http://www.openwall.com/lists/oss-security/2022/05/31/2
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2022/05/31/2
12
reference_url http://www.openwall.com/lists/oss-security/2022/06/27/5
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2022/06/27/5
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2099553
reference_id 2099553
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2099553
14
reference_url https://access.redhat.com/errata/RHSA-2022:7257
reference_id RHSA-2022:7257
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:7257
15
reference_url https://usn.ubuntu.com/7529-1/
reference_id USN-7529-1
reference_type
scores
url https://usn.ubuntu.com/7529-1/
fixed_packages
0
url pkg:maven/org.apache.tika/tika-core@1.28.3
purl pkg:maven/org.apache.tika/tika-core@1.28.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8qc9-3mxe-8ydp
1
vulnerability VCID-q319-5s6s-aqab
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.28.3
aliases CVE-2022-30973, GHSA-qw3f-w4pf-jh5f
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zj8z-ja31-mkcr
Fixing_vulnerabilities
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.3