Apache Software Foundation Uima vulnerabilities

• apache software foundation uima java sdk core, uima java sdk cpe, uima java sdk tools +2 more +4 more Apache UIMA Java SDK Core, Apache UIMA Java SDK CPE, Apache UIMA Java SDK Vinci adapter, Apache UIMA Java SDK tools: Potential untrusted code execution when deserializing certain binary CAS formats CVE-2023-39913 Fix available 8.8 HighNovember 8, 2023
• apache software foundation uima ducc, apache unstructured information management architecture +1 more Apache UIMA DUCC: DUCC (EOL) allows RCE CVE-2023-28935 8.8 HighMarch 30, 2023
• apache software foundation uima, apache uimaj +1 more Apache UIMA prior to 3.3.1 has a path traversal vulnerability when extracting (PEAR) archives CVE-2022-32287 Public exploitFix available 7.5 HighNovember 3, 2022
• apache uima ducc, uimaducc +1 more Cross-site Scripting in Apache UIMA CVE-2018-8035 Fix available 6.1 MediumMay 1, 2019
• apache uima-as, uimaducc, uimafit +2 more +4 more Improper Restriction of XML External Entity Reference in Apache uimaj CVE-2017-15691 Fix available 6.5 MediumApril 26, 2018