CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-25169

The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 19.3%

CVSS Severity

CVSS v3 Score 5.5

CVSS v2 Score 4.3

References

Products affected by CVE-2022-25169

Apache » Tika » Version: 0.1

cpe:2.3:a:apache:tika:0.1
Apache » Tika » Version: 0.10

cpe:2.3:a:apache:tika:0.10
Apache » Tika » Version: 0.2

cpe:2.3:a:apache:tika:0.2
Apache » Tika » Version: 0.3

cpe:2.3:a:apache:tika:0.3
Apache » Tika » Version: 0.4

cpe:2.3:a:apache:tika:0.4
Apache » Tika » Version: 0.5

cpe:2.3:a:apache:tika:0.5
Apache » Tika » Version: 0.6

cpe:2.3:a:apache:tika:0.6
Apache » Tika » Version: 0.7

cpe:2.3:a:apache:tika:0.7
Apache » Tika » Version: 0.8

cpe:2.3:a:apache:tika:0.8
Apache » Tika » Version: 0.9

cpe:2.3:a:apache:tika:0.9
Apache » Tika » Version: 1.0

cpe:2.3:a:apache:tika:1.0
Apache » Tika » Version: 1.1

cpe:2.3:a:apache:tika:1.1
Apache » Tika » Version: 1.10

cpe:2.3:a:apache:tika:1.10
Apache » Tika » Version: 1.11

cpe:2.3:a:apache:tika:1.11
Apache » Tika » Version: 1.12

cpe:2.3:a:apache:tika:1.12
Apache » Tika » Version: 1.13

cpe:2.3:a:apache:tika:1.13
Apache » Tika » Version: 1.14

cpe:2.3:a:apache:tika:1.14
Apache » Tika » Version: 1.15

cpe:2.3:a:apache:tika:1.15
Apache » Tika » Version: 1.16

cpe:2.3:a:apache:tika:1.16
Apache » Tika » Version: 1.17

cpe:2.3:a:apache:tika:1.17
Apache » Tika » Version: 1.18

cpe:2.3:a:apache:tika:1.18
Apache » Tika » Version: 1.19

cpe:2.3:a:apache:tika:1.19
Apache » Tika » Version: 1.19.1

cpe:2.3:a:apache:tika:1.19.1
Apache » Tika » Version: 1.2

cpe:2.3:a:apache:tika:1.2
Apache » Tika » Version: 1.20

cpe:2.3:a:apache:tika:1.20
Apache » Tika » Version: 1.21

cpe:2.3:a:apache:tika:1.21
Apache » Tika » Version: 1.22

cpe:2.3:a:apache:tika:1.22
Apache » Tika » Version: 1.23

cpe:2.3:a:apache:tika:1.23
Apache » Tika » Version: 1.24

cpe:2.3:a:apache:tika:1.24
Apache » Tika » Version: 1.24.1

cpe:2.3:a:apache:tika:1.24.1
Apache » Tika » Version: 1.25

cpe:2.3:a:apache:tika:1.25
Apache » Tika » Version: 1.26

cpe:2.3:a:apache:tika:1.26
Apache » Tika » Version: 1.27

cpe:2.3:a:apache:tika:1.27
Apache » Tika » Version: 1.28

cpe:2.3:a:apache:tika:1.28
Apache » Tika » Version: 1.28.1

cpe:2.3:a:apache:tika:1.28.1
Apache » Tika » Version: 1.3

cpe:2.3:a:apache:tika:1.3
Apache » Tika » Version: 1.4

cpe:2.3:a:apache:tika:1.4
Apache » Tika » Version: 1.5

cpe:2.3:a:apache:tika:1.5
Apache » Tika » Version: 1.6

cpe:2.3:a:apache:tika:1.6
Apache » Tika » Version: 1.7

cpe:2.3:a:apache:tika:1.7
Apache » Tika » Version: 1.8

cpe:2.3:a:apache:tika:1.8
Apache » Tika » Version: 1.9

cpe:2.3:a:apache:tika:1.9
Apache » Tika » Version: 2.0.0

cpe:2.3:a:apache:tika:2.0.0
Apache » Tika » Version: 2.1.0

cpe:2.3:a:apache:tika:2.1.0
Apache » Tika » Version: 2.2.0

cpe:2.3:a:apache:tika:2.2.0
Apache » Tika » Version: 2.2.1

cpe:2.3:a:apache:tika:2.2.1
Apache » Tika » Version: 2.3.0

cpe:2.3:a:apache:tika:2.3.0
Oracle » Primavera Unifier » Version: 17.10

cpe:2.3:a:oracle:primavera_unifier:17.10
Oracle » Primavera Unifier » Version: 17.11

cpe:2.3:a:oracle:primavera_unifier:17.11
Oracle » Primavera Unifier » Version: 17.12

cpe:2.3:a:oracle:primavera_unifier:17.12
Oracle » Primavera Unifier » Version: 17.7

cpe:2.3:a:oracle:primavera_unifier:17.7
Oracle » Primavera Unifier » Version: 17.8

cpe:2.3:a:oracle:primavera_unifier:17.8
Oracle » Primavera Unifier » Version: 17.9

cpe:2.3:a:oracle:primavera_unifier:17.9
Oracle » Primavera Unifier » Version: 18.8

cpe:2.3:a:oracle:primavera_unifier:18.8
Oracle » Primavera Unifier » Version: 19.12

cpe:2.3:a:oracle:primavera_unifier:19.12
Oracle » Primavera Unifier » Version: 20.12

cpe:2.3:a:oracle:primavera_unifier:20.12
Oracle » Primavera Unifier » Version: 21.12

cpe:2.3:a:oracle:primavera_unifier:21.12

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-25169

Products

Pricing

Contact Us