Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2022-34169

🗓️ 19 Jul 2022 00:00:00Reported by apacheType 
cve
 cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 666 Views🌐 WEB

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing maliciou

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for June 2023
30 Jun 202315:51
–ibm
IBM Security Bulletins		Security Bulletin: Rational Performance Tester contains a vulnerability which could lead to potential remote code execution
2 Jan 202618:17
–ibm
IBM Security Bulletins		Security Bulletin: IBM Content Navigator is affect my Apache Xalan
30 Mar 202609:01
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerability found in Apache Xalan Java XSLT library may affect IBM Enterprise Records
20 Oct 202211:30
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities may affect IBM® Semeru Runtime
7 Sep 202210:52
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data
15 Apr 202502:34
–ibm
IBM Security Bulletins		Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
13 Mar 202410:54
–ibm
IBM Security Bulletins		Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for March 2024.
15 Apr 202502:17
–ibm
IBM Security Bulletins		Security Bulletin: IBM Cloud Pak for Network Automation 2.5.0 fixes multiple security vulnerabilities
20 Jun 202308:52
–ibm
IBM Security Bulletins		Security Bulletin: IBM Planning Analytics Workspace is affected but not considered vulnerable to multiple vulnerabilities
26 Mar 202504:04
–ibm
Rows per page
NVD
Vulners
Node
apachexalan-javaRange≤2.7.2
Node
debiandebian_linuxMatch10.0
OR
debiandebian_linuxMatch11.0
Node
oraclegraalvmMatch20.3.6enterprise
OR
oraclegraalvmMatch21.3.2enterprise
OR
oraclegraalvmMatch22.1.0enterprise
OR
oraclejdkMatch1.7.0update343
OR
oraclejdkMatch1.8.0update333
OR
oraclejdkMatch11.0.15.1
OR
oraclejdkMatch17.0.3.1
OR
oraclejdkMatch18.0.1.1
OR
oraclejreMatch1.7.0update343
OR
oraclejreMatch1.8.0update333
OR
oraclejreMatch11.0.15.1
OR
oraclejreMatch17.0.3.1
OR
oraclejreMatch18.0.1.1
Node
oracleopenjdkRange11–11.0.15
OR
oracleopenjdkRange13–13.0.11
OR
oracleopenjdkRange15–15.0.7
OR
oracleopenjdkRange17–17.0.3
OR
oracleopenjdkMatch7-
OR
oracleopenjdkMatch7update1
OR
oracleopenjdkMatch7update10
OR
oracleopenjdkMatch7update101
OR
oracleopenjdkMatch7update11
OR
oracleopenjdkMatch7update111
OR
oracleopenjdkMatch7update121
OR
oracleopenjdkMatch7update13
OR
oracleopenjdkMatch7update131
OR
oracleopenjdkMatch7update141
OR
oracleopenjdkMatch7update15
OR
oracleopenjdkMatch7update151
OR
oracleopenjdkMatch7update161
OR
oracleopenjdkMatch7update17
OR
oracleopenjdkMatch7update171
OR
oracleopenjdkMatch7update181
OR
oracleopenjdkMatch7update191
OR
oracleopenjdkMatch7update2
OR
oracleopenjdkMatch7update201
OR
oracleopenjdkMatch7update21
OR
oracleopenjdkMatch7update211
OR
oracleopenjdkMatch7update221
OR
oracleopenjdkMatch7update231
OR
oracleopenjdkMatch7update241
OR
oracleopenjdkMatch7update25
OR
oracleopenjdkMatch7update251
OR
oracleopenjdkMatch7update261
OR
oracleopenjdkMatch7update271
OR
oracleopenjdkMatch7update281
OR
oracleopenjdkMatch7update291
OR
oracleopenjdkMatch7update3
OR
oracleopenjdkMatch7update301
OR
oracleopenjdkMatch7update311
OR
oracleopenjdkMatch7update321
OR
oracleopenjdkMatch7update4
OR
oracleopenjdkMatch7update40
OR
oracleopenjdkMatch7update45
OR
oracleopenjdkMatch7update5
OR
oracleopenjdkMatch7update51
OR
oracleopenjdkMatch7update55
OR
oracleopenjdkMatch7update6
OR
oracleopenjdkMatch7update60
OR
oracleopenjdkMatch7update65
OR
oracleopenjdkMatch7update67
OR
oracleopenjdkMatch7update7
OR
oracleopenjdkMatch7update72
OR
oracleopenjdkMatch7update76
OR
oracleopenjdkMatch7update80
OR
oracleopenjdkMatch7update85
OR
oracleopenjdkMatch7update9
OR
oracleopenjdkMatch7update91
OR
oracleopenjdkMatch7update95
OR
oracleopenjdkMatch7update97
OR
oracleopenjdkMatch7update99
OR
oracleopenjdkMatch8-
OR
oracleopenjdkMatch8milestone1
OR
oracleopenjdkMatch8milestone2
OR
oracleopenjdkMatch8milestone3
OR
oracleopenjdkMatch8milestone4
OR
oracleopenjdkMatch8milestone5
OR
oracleopenjdkMatch8milestone6
OR
oracleopenjdkMatch8milestone7
OR
oracleopenjdkMatch8milestone8
OR
oracleopenjdkMatch8milestone9
OR
oracleopenjdkMatch8update101
OR
oracleopenjdkMatch8update102
OR
oracleopenjdkMatch8update11
OR
oracleopenjdkMatch8update111
OR
oracleopenjdkMatch8update112
OR
oracleopenjdkMatch8update121
OR
oracleopenjdkMatch8update131
OR
oracleopenjdkMatch8update141
OR
oracleopenjdkMatch8update151
OR
oracleopenjdkMatch8update152
OR
oracleopenjdkMatch8update161
OR
oracleopenjdkMatch8update162
OR
oracleopenjdkMatch8update171
OR
oracleopenjdkMatch8update172
OR
oracleopenjdkMatch8update181
OR
oracleopenjdkMatch8update191
OR
oracleopenjdkMatch8update192
OR
oracleopenjdkMatch8update20
OR
oracleopenjdkMatch8update201
OR
oracleopenjdkMatch8update202
OR
oracleopenjdkMatch8update211
OR
oracleopenjdkMatch8update212
OR
oracleopenjdkMatch8update221
OR
oracleopenjdkMatch8update222
OR
oracleopenjdkMatch8update231
OR
oracleopenjdkMatch8update232
OR
oracleopenjdkMatch8update241
OR
oracleopenjdkMatch8update242
OR
oracleopenjdkMatch8update25
OR
oracleopenjdkMatch8update252
OR
oracleopenjdkMatch8update262
OR
oracleopenjdkMatch8update271
OR
oracleopenjdkMatch8update281
OR
oracleopenjdkMatch8update282
OR
oracleopenjdkMatch8update291
OR
oracleopenjdkMatch8update301
OR
oracleopenjdkMatch8update302
OR
oracleopenjdkMatch8update31
OR
oracleopenjdkMatch8update312
OR
oracleopenjdkMatch8update322
OR
oracleopenjdkMatch8update332
OR
oracleopenjdkMatch8update40
OR
oracleopenjdkMatch8update45
OR
oracleopenjdkMatch8update5
OR
oracleopenjdkMatch8update51
OR
oracleopenjdkMatch8update60
OR
oracleopenjdkMatch8update65
OR
oracleopenjdkMatch8update66
OR
oracleopenjdkMatch8update71
OR
oracleopenjdkMatch8update72
OR
oracleopenjdkMatch8update73
OR
oracleopenjdkMatch8update74
OR
oracleopenjdkMatch8update77
OR
oracleopenjdkMatch8update91
OR
oracleopenjdkMatch8update92
OR
oracleopenjdkMatch18
Node
fedoraprojectfedoraMatch35
OR
fedoraprojectfedoraMatch36
Node
netapp7-mode_transition_toolMatch-
OR
netappactive_iq_unified_managerMatch-vmware_vsphere
OR
netappactive_iq_unified_managerMatch-windows
OR
netappcloud_insights_acquisition_unitMatch-
OR
netappcloud_secure_agentMatch-
OR
netapphci_management_nodeMatch-
OR
netapponcommand_insightMatch-
OR
netappsolidfireMatch-
OR
netapphci_compute_nodeMatch-
Node
azulzuluMatch6.47
OR
azulzuluMatch7.54
OR
azulzuluMatch8.62
OR
azulzuluMatch11.56
OR
azulzuluMatch13.48
OR
azulzuluMatch15.40
OR
azulzuluMatch17.34
OR
azulzuluMatch18.30
[
  {
    "product": "Apache Xalan-J",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "2.7.2",
        "status": "affected",
        "version": "Xalan-J",
        "versionType": "custom"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
Filebinary/uploadPoC/instruction set for CVE-2022-34169 via crafted zip/xslt uploaded to /upload enabling integer truncation in Xalan XSLTC and arbitrary code execution.CWE-681
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 04:49Current
8.2High risk
Vulners AI Score8.2
CVSS 3.17.5
EPSS0.17673
SSVC
CWE-681
apachexalanjavaxsltlibraryinteger truncationvulnerabilitymaliciousstylesheetsjava bytecodeupdatenvdcve-2022-34169
666