Xerces2 Java (Apache) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2017-10-30. Vendor: Apache.

CVEs of Xerces2 Java

• CVE-2012-0881 - CVSS 7.5 (high), 2017-10-30: Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service (CPU consumption) via a crafted message to an XML service, which…
• CVE-2013-4002 - CVSS 7.1 (high), 2013-07-23: XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6…
• CVE-2009-2625 - CVSS 5 (medium), 2009-08-06: XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20,…