Xalan-java (Apache) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2022-07-19. Vendor: Apache.

CVEs of Xalan-java

• CVE-2022-34169 - CVSS 7.5 (high), 2022-07-19: The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java…
• CVE-2014-0107 - CVSS 7.5 (high), 2014-04-15: The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled,…