Formatting Objects Processor (Apache) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2024-10-09. Vendor: Apache.

CVEs of Formatting Objects Processor

• CVE-2024-28168 - CVSS 7.5 (high), 2024-10-09: Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users…
• CVE-2017-5661 - CVSS 7.3 (high), 2017-04-18: In Apache FOP before 2.2, files lying on the filesystem of the server which uses FOP can be revealed to arbitrary users who send maliciously formed SVG files.…