Product by Apache Software Foundation

    Apache XML Graphics

    5 known vulnerabilities in Apache XML Graphics (Apache Software Foundation), 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Apache XML Graphics (Apache Software Foundation)
    HighCVE-2022-40146

    Jar url should be blocked by DefaultScriptSecurity

    also in 3 other products

    7.5
    HighCVE-2022-42890

    Apache Batik prior to 1.16 allows RCE via scripting

    also in 3 other products

    7.5
    HighCVE-2022-41704

    Apache Batik prior to 1.16 allows RCE when loading untrusted SVG input

    also in 3 other products

    7.5
    MediumCVE-2022-38398

    Server-Side Request Forgery Information Disclosure Vulnerability

    also in 3 other products

    5.3
    MediumCVE-2022-38648

    PDFTranscoder does not block external resources

    also in 3 other products

    5.3

    All products by Apache Software Foundation