Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-wcee-51c7-x7fs
Vulnerability ID VCID-wcee-51c7-x7fs
Aliases CVE-2022-41704
GHSA-r29w-r9ph-vm76
Summary
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-918 Server-Side Request Forgery (SSRF)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3 7.5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-41704.json
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2022-41704
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2022-41704
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2022-41704
cvssv3.1 5.3 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-r29w-r9ph-vm76
cvssv3.1 7.5 https://github.com/apache/xmlgraphics-batik/commit/905f368b50c2567cf2c4869a0ab596a7b1b5125c
generic_textual HIGH https://github.com/apache/xmlgraphics-batik/commit/905f368b50c2567cf2c4869a0ab596a7b1b5125c
cvssv3.1 7.5 https://issues.apache.org/jira/browse/BATIK-1338
generic_textual HIGH https://issues.apache.org/jira/browse/BATIK-1338
cvssv3.1 7.5 https://lists.apache.org/thread/hplhx0o74jb7blj39fm4kw3otcnjd6xf
generic_textual HIGH https://lists.apache.org/thread/hplhx0o74jb7blj39fm4kw3otcnjd6xf
cvssv3.1 7.5 https://lists.debian.org/debian-lts-announce/2022/10/msg00038.html
generic_textual HIGH https://lists.debian.org/debian-lts-announce/2022/10/msg00038.html
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2022-41704
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2022-41704
cvssv3.1 7.5 https://security.gentoo.org/glsa/202401-11
generic_textual HIGH https://security.gentoo.org/glsa/202401-11
cvssv3.1 7.5 http://svn.apache.org/repos/asf/xmlgraphics/batik/trunk
generic_textual HIGH http://svn.apache.org/repos/asf/xmlgraphics/batik/trunk
cvssv3.1 7.5 https://www.debian.org/security/2022/dsa-5264
generic_textual HIGH https://www.debian.org/security/2022/dsa-5264
cvssv3.1 7.5 https://xmlgraphics.apache.org/security.html
generic_textual HIGH https://xmlgraphics.apache.org/security.html
cvssv3.1 7.5 http://www.openwall.com/lists/oss-security/2022/10/25/2
generic_textual HIGH http://www.openwall.com/lists/oss-security/2022/10/25/2
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-41704.json
https://api.first.org/data/v1/epss?cve=CVE-2022-41704
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41704
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42890
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://github.com/apache/xmlgraphics-batik/commit/905f368b50c2567cf2c4869a0ab596a7b1b5125c
https://issues.apache.org/jira/browse/BATIK-1338
https://lists.apache.org/thread/hplhx0o74jb7blj39fm4kw3otcnjd6xf
https://lists.debian.org/debian-lts-announce/2022/10/msg00038.html
http://svn.apache.org/repos/asf/xmlgraphics/batik/trunk
https://www.debian.org/security/2022/dsa-5264
http://www.openwall.com/lists/oss-security/2022/10/25/2
2182182 https://bugzilla.redhat.com/show_bug.cgi?id=2182182
CVE-2022-41704 https://nvd.nist.gov/vuln/detail/CVE-2022-41704
GHSA-r29w-r9ph-vm76 https://github.com/advisories/GHSA-r29w-r9ph-vm76
GLSA-202401-11 https://security.gentoo.org/glsa/202401-11
RHSA-2023:2100 https://access.redhat.com/errata/RHSA-2023:2100
RHSA-2023:3954 https://access.redhat.com/errata/RHSA-2023:3954
USN-6117-1 https://usn.ubuntu.com/6117-1/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-41704.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/apache/xmlgraphics-batik/commit/905f368b50c2567cf2c4869a0ab596a7b1b5125c
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://issues.apache.org/jira/browse/BATIK-1338
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://lists.apache.org/thread/hplhx0o74jb7blj39fm4kw3otcnjd6xf
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://lists.debian.org/debian-lts-announce/2022/10/msg00038.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2022-41704
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://security.gentoo.org/glsa/202401-11
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at http://svn.apache.org/repos/asf/xmlgraphics/batik/trunk
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://www.debian.org/security/2022/dsa-5264
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://xmlgraphics.apache.org/security.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at http://www.openwall.com/lists/oss-security/2022/10/25/2
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.67457
EPSS Score 0.00526
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-10T18:09:02.881063+00:00 SUSE Severity Score Importer Import https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml 38.6.0