Product by Apache Software Foundation

Apache XML Graphics

10 known vulnerabilities in Apache XML Graphics (Apache Software Foundation), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Apache XML Graphics (Apache Software Foundation)

Critical	CVE-2018-8013	Apache Batik: Deserialization of Untrusted Data also in 21 other products	9.8	24.05.2018
High	CVE-2020-11987	Apache Batik: Server-Side Request Forgery (SSRF) also in 22 other products	8.2	24.02.2021
High	CVE-2019-17566	Apache Batik: Server-Side Request Forgery (SSRF) also in 17 other products	7.5	12.11.2020
High	CVE-2022-40146	Jar url should be blocked by DefaultScriptSecurity also in 3 other products	7.5	22.09.2022
High	CVE-2017-5662	Apache Batik: XML External Entity (XXE) also in 1 other product	7.3	18.04.2017
High	CVE-2022-42890	Apache Batik prior to 1.16 allows RCE via scripting also in 3 other products	7.5	25.10.2022
High	CVE-2022-41704	Apache Batik prior to 1.16 allows RCE when loading untrusted SVG input also in 3 other products	7.5	25.10.2022
Medium	CVE-2022-38398	Server-Side Request Forgery Information Disclosure Vulnerability also in 3 other products	5.3	22.09.2022
Medium	CVE-2022-38648	PDFTranscoder does not block external resources also in 3 other products	5.3	22.09.2022
Not rated	CVE-2015-0250	Apache XML Graphics: XML External Entity (XXE) also in 2 other products	—	24.03.2015