# xerces:xercesImpl (Maven) vulnerabilities

5 known vulnerabilities, with the versions each affects and the releases that fix them.

## At a glance

- Latest release: not known (cve.now hasn't read this package's releases)
- Newest unaffected release: not known without release data
- Registry: https://central.sonatype.com/artifact/xerces/xercesImpl

## Advisories (5)

### [CVE-2022-23437](https://cve.now/CVE-2022-23437): Infinite loop within Apache XercesJ xml parser

- Severity: Unrated
- Published: Jan 24, 2022
- Affected: fixed in 2.12.2.

### [CVE-2020-14338](https://cve.now/CVE-2020-14338): A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of…

- Severity: Unrated
- Published: Sep 17, 2020
- Affected: fixed in 2.12.0.sp3.

### [CVE-2012-0881](https://cve.now/CVE-2012-0881): Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service (CPU consumption) via a crafted message to…

- Severity: Unrated
- Published: Oct 30, 2017
- Affected: fixed in 2.12.0.

### [CVE-2013-4002](https://cve.now/CVE-2013-4002): XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0…

- Severity: Unrated
- Published: Jul 23, 2013
- Affected: fixed in 2.12.0.

### [CVE-2009-2625](https://cve.now/CVE-2009-2625): XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE…

- Severity: Unrated
- Published: Aug 6, 2009
- Affected: fixed in 2.10.0.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/maven/xerces:xercesimpl
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.