Skip to content

Product

debian/libxalan2-java vulnerabilities

2 published CVES affecting debian/libxalan2-java, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
0
Low
0
Unscored
1
CISA KEV
0

Latest debian/libxalan2-java CVEs

Newest publication first

  1. CVE-2014-0107 Improper Authorization in Apache Xalan-Java

    Published
    HighCVSS 7.5

    The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass expected restrictions and load arbitrary classes or access external resources via a...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.