Skip to content

Product

debian/libxerces2-java vulnerabilities

3 published CVES affecting debian/libxerces2-java, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
1
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest debian/libxerces2-java CVEs

Newest publication first

  1. CVE-2022-23437 Infinite loop within Apache XercesJ xml parser

    Published
    MediumCVSS 6.5

    There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerabili...

  2. CVE-2012-0881 Denial of service in Apache Xerces2

    Published
    HighCVSS 7.5 EPSS 17.5%

    Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service (CPU consumption) via a crafted message to an XML service, which triggers hash table collisions.

  3. CVE-2009-2625 Denial of service in Apache Xerces2

    Published
    MediumCVSS 5.0 EPSS 30.4%

    XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malfo...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.