CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-34169

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 or later. Note: Java runtimes (such as OpenJDK) include repackaged copies of Xalan.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.108

EPSS Ranking 93.0%

CVSS Severity

CVSS v3 Score 7.5

References

Products affected by CVE-2022-34169

Apache » Xalan-Java » Version: 1.0.0

cpe:2.3:a:apache:xalan-java:1.0.0
Apache » Xalan-Java » Version: 2.0.0

cpe:2.3:a:apache:xalan-java:2.0.0
Apache » Xalan-Java » Version: 2.0.1

cpe:2.3:a:apache:xalan-java:2.0.1
Apache » Xalan-Java » Version: 2.1.0

cpe:2.3:a:apache:xalan-java:2.1.0
Apache » Xalan-Java » Version: 2.2.0

cpe:2.3:a:apache:xalan-java:2.2.0
Apache » Xalan-Java » Version: 2.4.0

cpe:2.3:a:apache:xalan-java:2.4.0
Apache » Xalan-Java » Version: 2.4.1

cpe:2.3:a:apache:xalan-java:2.4.1
Apache » Xalan-Java » Version: 2.5.0

cpe:2.3:a:apache:xalan-java:2.5.0
Apache » Xalan-Java » Version: 2.5.1

cpe:2.3:a:apache:xalan-java:2.5.1
Apache » Xalan-Java » Version: 2.5.2

cpe:2.3:a:apache:xalan-java:2.5.2
Apache » Xalan-Java » Version: 2.6.0

cpe:2.3:a:apache:xalan-java:2.6.0
Apache » Xalan-Java » Version: 2.7.0

cpe:2.3:a:apache:xalan-java:2.7.0
Apache » Xalan-Java » Version: 2.7.1

cpe:2.3:a:apache:xalan-java:2.7.1
Apache » Xalan-Java » Version: 2.7.2

cpe:2.3:a:apache:xalan-java:2.7.2
Azul » Zulu » Version: 11.56

cpe:2.3:a:azul:zulu:11.56
Azul » Zulu » Version: 13.48

cpe:2.3:a:azul:zulu:13.48
Azul » Zulu » Version: 15.40

cpe:2.3:a:azul:zulu:15.40
Azul » Zulu » Version: 17.34

cpe:2.3:a:azul:zulu:17.34
Azul » Zulu » Version: 18.30

cpe:2.3:a:azul:zulu:18.30
Azul » Zulu » Version: 6.47

cpe:2.3:a:azul:zulu:6.47
Azul » Zulu » Version: 7.54

cpe:2.3:a:azul:zulu:7.54
Azul » Zulu » Version: 8.62

cpe:2.3:a:azul:zulu:8.62
Netapp » 7-Mode Transition Tool » Version: N/A

cpe:2.3:a:netapp:7-mode_transition_tool:-
Netapp » Active Iq Unified Manager » Version: N/A

cpe:2.3:a:netapp:active_iq_unified_manager:-
Netapp » Cloud Insights Acquisition Unit » Version: N/A

cpe:2.3:a:netapp:cloud_insights_acquisition_unit:-
Netapp » Cloud Secure Agent » Version: N/A

cpe:2.3:a:netapp:cloud_secure_agent:-
Netapp » Hci Management Node » Version: N/A

cpe:2.3:a:netapp:hci_management_node:-
Netapp » Oncommand Insight » Version: N/A

cpe:2.3:a:netapp:oncommand_insight:-
Netapp » Solidfire » Version: N/A

cpe:2.3:a:netapp:solidfire:-
Oracle » Graalvm » Version: 20.3.6

cpe:2.3:a:oracle:graalvm:20.3.6
Oracle » Graalvm » Version: 21.3.2

cpe:2.3:a:oracle:graalvm:21.3.2
Oracle » Graalvm » Version: 22.1.0

cpe:2.3:a:oracle:graalvm:22.1.0
Oracle » Jdk » Version: 1.7.0

cpe:2.3:a:oracle:jdk:1.7.0
Oracle » Jdk » Version: 1.8.0

cpe:2.3:a:oracle:jdk:1.8.0
Oracle » Jdk » Version: 11.0.15.1

cpe:2.3:a:oracle:jdk:11.0.15.1
Oracle » Jdk » Version: 17.0.3.1

cpe:2.3:a:oracle:jdk:17.0.3.1
Oracle » Jdk » Version: 18.0.1.1

cpe:2.3:a:oracle:jdk:18.0.1.1
Oracle » Jre » Version: 1.7.0

cpe:2.3:a:oracle:jre:1.7.0
Oracle » Jre » Version: 1.8.0

cpe:2.3:a:oracle:jre:1.8.0
Oracle » Jre » Version: 11.0.15.1

cpe:2.3:a:oracle:jre:11.0.15.1
Oracle » Jre » Version: 17.0.3.1

cpe:2.3:a:oracle:jre:17.0.3.1
Oracle » Jre » Version: 18.0.1.1

cpe:2.3:a:oracle:jre:18.0.1.1
Oracle » Openjdk » Version: 11

cpe:2.3:a:oracle:openjdk:11
Oracle » Openjdk » Version: 11.0.1

cpe:2.3:a:oracle:openjdk:11.0.1
Oracle » Openjdk » Version: 11.0.10

cpe:2.3:a:oracle:openjdk:11.0.10
Oracle » Openjdk » Version: 11.0.11

cpe:2.3:a:oracle:openjdk:11.0.11
Oracle » Openjdk » Version: 11.0.12

cpe:2.3:a:oracle:openjdk:11.0.12
Oracle » Openjdk » Version: 11.0.13

cpe:2.3:a:oracle:openjdk:11.0.13
Oracle » Openjdk » Version: 11.0.14

cpe:2.3:a:oracle:openjdk:11.0.14
Oracle » Openjdk » Version: 11.0.2

cpe:2.3:a:oracle:openjdk:11.0.2
Oracle » Openjdk » Version: 11.0.3

cpe:2.3:a:oracle:openjdk:11.0.3
Oracle » Openjdk » Version: 11.0.4

cpe:2.3:a:oracle:openjdk:11.0.4
Oracle » Openjdk » Version: 11.0.5

cpe:2.3:a:oracle:openjdk:11.0.5
Oracle » Openjdk » Version: 11.0.6

cpe:2.3:a:oracle:openjdk:11.0.6
Oracle » Openjdk » Version: 11.0.7

cpe:2.3:a:oracle:openjdk:11.0.7
Oracle » Openjdk » Version: 11.0.8

cpe:2.3:a:oracle:openjdk:11.0.8
Oracle » Openjdk » Version: 11.0.9

cpe:2.3:a:oracle:openjdk:11.0.9
Oracle » Openjdk » Version: 13

cpe:2.3:a:oracle:openjdk:13
Oracle » Openjdk » Version: 13.0.1

cpe:2.3:a:oracle:openjdk:13.0.1
Oracle » Openjdk » Version: 13.0.10

cpe:2.3:a:oracle:openjdk:13.0.10
Oracle » Openjdk » Version: 13.0.2

cpe:2.3:a:oracle:openjdk:13.0.2
Oracle » Openjdk » Version: 13.0.3

cpe:2.3:a:oracle:openjdk:13.0.3
Oracle » Openjdk » Version: 13.0.4

cpe:2.3:a:oracle:openjdk:13.0.4
Oracle » Openjdk » Version: 13.0.5

cpe:2.3:a:oracle:openjdk:13.0.5
Oracle » Openjdk » Version: 13.0.6

cpe:2.3:a:oracle:openjdk:13.0.6
Oracle » Openjdk » Version: 13.0.7

cpe:2.3:a:oracle:openjdk:13.0.7
Oracle » Openjdk » Version: 13.0.8

cpe:2.3:a:oracle:openjdk:13.0.8
Oracle » Openjdk » Version: 15

cpe:2.3:a:oracle:openjdk:15
Oracle » Openjdk » Version: 15.0.1

cpe:2.3:a:oracle:openjdk:15.0.1
Oracle » Openjdk » Version: 15.0.2

cpe:2.3:a:oracle:openjdk:15.0.2
Oracle » Openjdk » Version: 15.0.3

cpe:2.3:a:oracle:openjdk:15.0.3
Oracle » Openjdk » Version: 15.0.4

cpe:2.3:a:oracle:openjdk:15.0.4
Oracle » Openjdk » Version: 15.0.6

cpe:2.3:a:oracle:openjdk:15.0.6
Oracle » Openjdk » Version: 17

cpe:2.3:a:oracle:openjdk:17
Oracle » Openjdk » Version: 17.0.1

cpe:2.3:a:oracle:openjdk:17.0.1
Oracle » Openjdk » Version: 17.0.2

cpe:2.3:a:oracle:openjdk:17.0.2
Oracle » Openjdk » Version: 18

cpe:2.3:a:oracle:openjdk:18
Oracle » Openjdk » Version: 7

cpe:2.3:a:oracle:openjdk:7
Oracle » Openjdk » Version: 8

cpe:2.3:a:oracle:openjdk:8
Netapp » Hci Compute Node » Version: N/A

cpe:2.3:h:netapp:hci_compute_node:-
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 11.0

cpe:2.3:o:debian:debian_linux:11.0
Fedoraproject » Fedora » Version: 35

cpe:2.3:o:fedoraproject:fedora:35
Fedoraproject » Fedora » Version: 36

cpe:2.3:o:fedoraproject:fedora:36

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-34169

Products

Pricing

Contact Us