Apache / Batik
10 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2022-42890 | Apache Batik prior to 1.16 allows RCE via scripting | HIGH | 7.5 | Oct 25, 2022 |
| CVE-2022-41704 | Apache Batik prior to 1.16 allows RCE when loading untrusted SVG input | HIGH | 7.5 | Oct 25, 2022 |
| CVE-2022-40146 | Jar url should be blocked by DefaultScriptSecurity | HIGH | 7.5 | Sep 22, 2022 |
| CVE-2022-38648 | PDFTranscoder does not block external resources | MEDIUM | 5.3 | Sep 22, 2022 |
| CVE-2022-38398 | Server-Side Request Forgery Information Disclosure Vulnerability | MEDIUM | 5.3 | Sep 22, 2022 |
| CVE-2020-11987 | batik: SSRF due to improper input validation by the NodePickerPanel | HIGH | 8.2 | Feb 24, 2021 |
| CVE-2019-17566 | batik: SSRF via "xlink:href" | HIGH | 7.5 | Nov 12, 2020 |
| CVE-2018-8013 | batik: information disclosure when deserializing | CRITICAL | 9.8 | May 24, 2018 |
| CVE-2017-5662 | batik: XML external entity processing vulnerability | HIGH | 7.5 | Apr 18, 2017 |
| CVE-2015-0250 | batik: XML External Entity (XXE) injection in SVG parsing | MEDIUM | 6.4 | Mar 24, 2015 |
Showing 1 to 10 of 10 CVEs