xmlgraphics-batik vulnerabilities (SUSE)

11 vulnerabilities.

• xmlgraphics-batik SUSE Apache XML Graphics FOP: XML External Entity (XXE) Processing CVE-2024-28168 Fix available 7.5 HighOctober 9, 2024
• xmlgraphics-batik SUSE Apache XML Graphics Batik: Information disclosure vulnerability CVE-2022-44729 Fix available 7.1 HighAugust 22, 2023
• xmlgraphics-batik SUSE Apache XML Graphics Batik: Information disclosure vulnerability CVE-2022-44730 Fix available 4.4 MediumAugust 22, 2023
• xmlgraphics-batik SUSE Apache Batik prior to 1.16 allows RCE via scripting CVE-2022-42890 Fix available 7.5 HighOctober 25, 2022
• xmlgraphics-batik SUSE Apache Batik prior to 1.16 allows RCE when loading untrusted SVG input CVE-2022-41704 Fix available 7.5 HighOctober 25, 2022
• xmlgraphics-batik SUSE Jar url should be blocked by DefaultScriptSecurity CVE-2022-40146 Public exploitFix available 7.5 HighSeptember 22, 2022
• xmlgraphics-batik SUSE PDFTranscoder does not block external resources CVE-2022-38648 Fix available 5.3 MediumSeptember 22, 2022
• xmlgraphics-batik SUSE Server-Side Request Forgery Information Disclosure Vulnerability CVE-2022-38398 Fix available 5.3 MediumSeptember 22, 2022
• xmlgraphics-batik SUSE Server-side request forgery (SSRF) in Apache Batik CVE-2020-11987 Fix available EPSS 13.6% 8.2 HighFebruary 24, 2021
• xmlgraphics-batik SUSE Server-side request forgery (SSRF) in Apache Batik CVE-2019-17566 Fix available EPSS 10.9% 7.5 HighJune 22, 2020
• xmlgraphics-batik SUSE Improper Restriction of XML External Entity Reference in Apache Batik CVE-2017-5662 Fix available 7.3 HighApril 18, 2017