EUVD-2022-5145

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Apache Xalan-Java before 2.7.2 has access issues allowing remote code execution and resource access.

Reporter	Title	Published	Views	Family All 134
IBM Security Bulletins	Security Bulletin: Tivoli Common Reporting iFixes for multiple Security Vulnerabilities (CVE-2014-3566,CVE-2014-6145,CVE-2014-1568,CVE-2014-4263,CVE-2014-3513,CVE-2014-3567,CVE-2014-3568,CVE-2014-0107,CVE-2014-0075,CVE-2014-0096,CVE-2014-0099,CVE-2014-011	17 Jun 201814:55	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability exists in Apache Xalan-Java prior to 2.7.2 as used in IBM Sterling Control Center 5.2 (CVE-2014-0107)	17 Dec 201922:47	–	ibm
IBM Security Bulletins	Security Bulletin: Cognos BI Server is affected by the following vulnerabilities: CVE-2014-0107, CVE-2014-0075, CVE-2014-0096, CVE-2014-0099, CVE-2014-0119, CVE-2014-0878, CVE-2014-0460	15 Jun 201823:13	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability exists in Apache-Xalan-Java used in IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2014-0107)	11 Feb 202018:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for March 2024.	15 Apr 202502:17	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Xalan-Java の脆弱性 (CVE-2014-0107) による IBM FileNet Business Process Framework への影響	17 Jun 201812:07	–	ibm
IBM Security Bulletins	Security Bulletin: Security exposure in IBM Cognos Incentive Compensation Management (CVE-2014-0107)	15 Jun 201822:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by an Apache Xalan-Java library vulnerability (CVE-2014-0107)	14 Apr 202120:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect for Healthcare is affected by multiple Apache vulnerabilities	14 Jun 202313:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager August 2023 - Multiple CVEs addressed	15 Sep 202308:18	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "dc5c5b4d-ebf7-34f3-9d96-363e87d52548",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "2708e327-c367-384a-9e8f-6921df3cfad3",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2014-0107
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/92023
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
issues	www.issues.apache.org/jira/browse/XALANJ-2435
lists	www.lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
lists	www.lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
lists	www.lists.apache.org/thread.html/r0c00afcab8f238562e27b3ae7b8af1913c62bc60838fb8b34c19e26b@%3Cdev.tomcat.apache.org%3E
lists	www.lists.apache.org/thread.html/r2900489bc665a2e32d021bb21f6ce2cb8e6bb5973490eebb9a346bca@%3Cdev.tomcat.apache.org%3E
security	www.security.gentoo.org/glsa/201604-02
oracle	www.oracle.com//security-alerts/cpujul2021.html

03 Oct 2025 20:07Current

7.4High risk

Vulners AI Score7.4

CVSS 27.5

EPSS0.05863