Product by Debian
Batik
7 known vulnerabilities in Batik (Debian), 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2018-8013 | Apache Batik: Deserialization of Untrusted Data | 9.8 | |
| High | CVE-2020-11987 | Apache Batik: Server-Side Request Forgery (SSRF) | 8.2 | |
| High | CVE-2022-40146 | Jar url should be blocked by DefaultScriptSecurity | 7.5 | |
| High | CVE-2022-42890 | Apache Batik prior to 1.16 allows RCE via scripting | 7.5 | |
| High | CVE-2022-41704 | Apache Batik prior to 1.16 allows RCE when loading untrusted SVG input | 7.5 | |
| Medium | CVE-2022-38398 | Server-Side Request Forgery Information Disclosure Vulnerability | 5.3 | |
| Medium | CVE-2022-38648 | PDFTranscoder does not block external resources | 5.3 |