Apache Xml Graphics (Apache Software Foundation) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-10-25. Vendor: Apache Software Foundation.

CVEs of Apache Xml Graphics

• CVE-2022-42890 - CVSS 7.5 (high), 2022-10-25: A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics…
• CVE-2022-41704 - CVSS 7.5 (high), 2022-10-25: A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to…
• CVE-2022-40146 - CVSS 7.5 (high), 2022-09-22: Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache…
• CVE-2022-38648 - CVSS 5.3 (medium), 2022-09-22: Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML…
• CVE-2022-38398 - CVSS 5.3 (medium), 2022-09-22: Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects…