Apache Uimaj vulnerabilities

• apache software foundation uima java sdk core, uima java sdk cpe, uima java sdk tools +2 more +4 more Apache UIMA Java SDK Core, Apache UIMA Java SDK CPE, Apache UIMA Java SDK Vinci adapter, Apache UIMA Java SDK tools: Potential untrusted code execution when deserializing certain binary CAS formats CVE-2023-39913 Fix available 8.8 HighNovember 8, 2023
• apache software foundation uima, apache uimaj +1 more Apache UIMA prior to 3.3.1 has a path traversal vulnerability when extracting (PEAR) archives CVE-2022-32287 Public exploitFix available 7.5 HighNovember 3, 2022
• apache uima-as, uimaducc, uimafit +2 more +4 more Improper Restriction of XML External Entity Reference in Apache uimaj CVE-2017-15691 Fix available 6.5 MediumApril 26, 2018