Search for packages
purl | pkg:maven/xerces/xercesImpl@2.4.0 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-3tk1-c7tn-aaaf
Aliases: CVE-2013-4002 GHSA-7j4h-8wpf-rqfh |
Uncontrolled Resource Consumption `XMLscanner.java` allows remote attackers to cause a denial of service via vectors related to XML attribute names. |
Affected by 2 other vulnerabilities. |
VCID-6uuy-hhj5-aaam
Aliases: CVE-2012-0881 GHSA-vmqm-g3vh-847m |
Denial of service in Apache Xerces2 |
Affected by 2 other vulnerabilities. |
VCID-ff7b-9g5f-aaar
Aliases: CVE-2020-14338 GHSA-w4jq-qh47-hvjq |
A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature. This flaw allows a specially-crafted XML file to manipulate the validation process in certain cases. This issue is the same flaw as CVE-2020-14621, which affected OpenJDK, and uses a similar code. This flaw affects all Xerces JBoss versions before 2.12.0.SP3. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. |
VCID-m6y6-tzxd-aaas
Aliases: CVE-2022-23437 GHSA-h65f-jvqw-m9fj |
Infinite Loop in Apache Xerces Java |
Affected by 0 other vulnerabilities. |
VCID-pgtg-mank-aaak
Aliases: CVE-2009-2625 GHSA-334p-wv2m-w3vp |
Denial of service in Apache Xerces2 |
Affected by 4 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
VCID-1shs-rvbt-aaac | Excessive Iteration Xerces allows remote attackers to affect availability. |
CVE-2012-1724
|