Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:OPENSUSE-SU-2024:11845-1
HistoryJun 15, 2024 - 12:00 a.m.

xerces-j2-2.12.2-1.1 on GA media

2024-06-1500:00:00
Google
osv.dev
xerces-j2-2.12.2-1.1
security
opensuse tumbleweed

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

Low

JSON

These are all security issues fixed in the xerces-j2-2.12.2-1.1 package on the GA media of openSUSE Tumbleweed.

Related

osv 3
suse 2
ibm 36
nessus 24
openvas 9
rubygems 1
nvd 1
ubuntucve 1
redhatcve 1
prion 1
cve 1
github 2
cvelist 1
veracode 1
cnvd 1
debiancve 1
redhat 4
oracle 6
osv
osv
XML Injection in Xerces Java affects Nokogiri
2022-04-11 21:30:00
Infinite Loop in Apache Xerces Java
2022-01-27 16:13:07
ruby3.3-rubygem-nokogiri-1.15.5-1.5 on GA media
2024-07-12 00:00:00
suse
suse
Security update for xerces-j2 (important)
2022-02-18 00:00:00
Security update for xerces-j2 (important)
2022-02-18 00:00:00
ibm
ibm
Security Bulletin: IBM Sterling Control Center is vulnerable to a denial of service vulnerability due to Apache Xerces2 Java XML Parser (CVE-2022-23437)
2022-06-13 17:15:01
Security Bulletin: IBM TRIRIGA Application Platform discloses use of Apache Xerces (CVE-2022-23437)
2023-08-01 17:17:31
Security Bulletin: Vulnerabilities in xercesImpl library affects IBM Engineering Test Management (ETM) (CVE-2022-23437)
2023-09-29 11:50:09
nessus
nessus
RHEL 9 : xerces-j2 (Unpatched Vulnerability)
2024-06-03 00:00:00
SUSE SLES12 Security Update : xerces-j2 (SUSE-SU-2022:0542-1)
2022-02-22 00:00:00
EulerOS 2.0 SP3 : xerces-j2 (EulerOS-SA-2022-1772)
2022-05-26 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:0503-1)
2022-02-19 00:00:00
openSUSE: Security Advisory for xerces-j2 (openSUSE-SU-2022:0500-1)
2022-02-22 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:0542-1)
2022-02-22 00:00:00
rubygems
rubygems
XML Injection in Xerces Java affects Nokogiri
2022-04-10 21:00:00
nvd
nvd
CVE-2022-23437
2022-01-24 15:15:09
ubuntucve
ubuntucve
CVE-2022-23437
2022-01-24 00:00:00
redhatcve
redhatcve
CVE-2022-23437
2022-01-27 11:58:37
prion
prion
Design/Logic Flaw
2022-01-24 15:15:00
cve
cve
CVE-2022-23437
2022-01-24 15:15:09
github
github
XML Injection in Xerces Java affects Nokogiri
2022-04-11 21:30:00
Infinite Loop in Apache Xerces Java
2022-01-27 16:13:07
cvelist
cvelist
CVE-2022-23437 Infinite loop within Apache XercesJ xml parser
2022-01-24 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-01-25 04:25:23
cnvd
cnvd
Apache Xerces Denial of Service Vulnerability
2022-01-26 00:00:00
debiancve
debiancve
CVE-2022-23437
2022-01-24 15:15:09
redhat
redhat
(RHSA-2022:4919) Moderate: Red Hat JBoss Enterprise Application Platform 7.4.5 security update on RHEL 8
2022-06-06 14:31:32
(RHSA-2022:4922) Moderate: Red Hat JBoss Enterprise Application Platform 7.4.5 security update
2022-06-06 15:07:26
(RHSA-2022:4918) Moderate: Red Hat JBoss Enterprise Application Platform 7.4.5 security update on RHEL 7
2022-06-06 14:31:15
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

Low

JSON
Related for OSV:OPENSUSE-SU-2024:11845-1
osv3suse2ibm36nessus24openvas9rubygems1nvd1ubuntucve1redhatcve1prion1cve1github2cvelist1veracode1cnvd1debiancve1redhat4oracle6