Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

xerces:xercesImpl

5 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5
Registry
Maven Central

Advisories 5

  • Infinite loop within Apache XercesJ xml parser

    Affected: fixed in 2.12.2.

  • A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of…

    Affected: fixed in 2.12.0.sp3.

  • Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service (CPU consumption) via a crafted message to…

    Affected: fixed in 2.12.0.

  • XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0…

    Affected: fixed in 2.12.0.

  • XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE…

    Affected: fixed in 2.10.0.