CVE-2022-44729

🗓️ 22 Aug 2023 14:12:50Reported by apacheType

SSRF vulnerability in Apache XML Graphics Batik version 1.1

Reporter	Title	Published	Views	Family All 80
IBM Security Bulletins	Security Bulletin: Multipe vulnerabilities in DITA may affect IBM Business Automation Workflow Case Management docGenerator feature (CVE-2023-2976, CVE-2022-44729, CVE-2022-44730)	12 Dec 202309:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.5	30 Apr 202418:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Application Performance Management	14 Feb 202408:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in Batik Jars which are shipped with IBM® Intelligent Operations Center(CVE-2022-44730, CVE-2022-44729)	23 Apr 202418:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	16 Nov 202318:47	–	ibm
IBM Security Bulletins	Security Bulletin: The IBM App Connect Enterprise Toolkit and the IBM Integration Bus Toolkit are vulnerable to a server-side request forgery due to Apache Batik (CVE-2022-44730, CVE-2022-44729)	2 Oct 202316:54	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in batik-all-1.15.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2022-44730 and CVE-2022-44729)	17 Jan 202420:11	–	ibm
IBM Security Bulletins	Security Bulletin: Security fixes available for The IBM® Engineering System Design Rhapsody products on IBM Jazz Technology	19 Apr 202407:11	–	ibm
IBM Security Bulletins	Security Bulletin: InfoSphere Data Architect (IDA) 9.2.1 Vulnerability Fixes.	4 Mar 202607:48	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in batik-all-1.15.jar used by IBM Maximo Asset Management application (CVE-2022-44730 and CVE-2022-44729)	15 Jan 202419:22	–	ibm

NVD

Vulners

Node

apache xml_graphics_batikRange1.0–1.16

Node

debian debian_linuxMatch10.0

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache XML Graphics Batik",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "1.16"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2023/08/22/2
xmlgraphics	www.xmlgraphics.apache.org/security.html
lists	www.lists.debian.org/debian-lts-announce/2023/10/msg00021.html
security	www.security.gentoo.org/glsa/202401-11
lists	www.lists.apache.org/thread/hco2nw1typoorz33qzs0fcdx0ws6d6j2
openwall	www.openwall.com/lists/oss-security/2023/08/22/4

13 Feb 2025 17:15Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.1

EPSS0.00119

CWE-918