Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Apache UIMA Java SDK Deserialization of Untrusted Data, Improper Input Validation vulnerability

🗓️ 08 Nov 2023 09:30:25Reported by GitHub Advisory DatabaseType 
github
 github🔗 github.com👁 24 Views

Apache UIMA Java SDK Deserialization Vulnerability Apache UIMA Java SDK is vulnerable to deserialization of untrusted data and improper input validation. Users should upgrade to version 3.5.0 to fix the issue

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Apache UIMA Java SDK arbitrary code execution vulnerability ( CVE-2023-39913)
5 Feb 202420:20
–ibm
IBM Security Bulletins		Security Bulletin: Multiple Vulnerabilities in IBM Datacap
12 Jan 202617:46
–ibm
IBM Security Bulletins		Security Bulletin: Apache uimaj-core.jar security vulnerability CVE-2022-32287 and CVE-2023-39913 in FileNet Content Manager (FNCM) component Content Search Services (CSS) / Enterprise Content Management Text Search (ECMTS)
17 Dec 202516:41
–ibm
CNNVD		Apache UIMA 代码问题漏洞
8 Nov 202300:00
–cnnvd
CNVD		Apache UIMA Deserialization Vulnerability
13 Nov 202300:00
–cnvd
CVE		CVE-2023-39913
8 Nov 202308:04
–cve
Cvelist		CVE-2023-39913 Apache UIMA Java SDK Core, Apache UIMA Java SDK CPE, Apache UIMA Java SDK Vinci adapter, Apache UIMA Java SDK tools: Potential untrusted code execution when deserializing certain binary CAS formats
8 Nov 202308:04
–cvelist
EUVD		EUVD-2023-2891
3 Oct 202520:07
–euvd
NVD		CVE-2023-39913
8 Nov 202308:15
–nvd
OSV		GHSA-5R8J-QMCM-7G7Q Apache UIMA Java SDK Deserialization of Untrusted Data, Improper Input Validation vulnerability
8 Nov 202309:30
–osv
Rows per page
Vulners
Node
org.apache.uimauimajRange<3.5.0maven

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
13 Feb 2025 19:20Current
8.6High risk
Vulners AI Score8.6
CVSS 3.18.8
EPSS0.00415
SSVC
CWE-20CWE-502
apache uimasdkdeserializationvulnerabilityinput validationupgradejava 9security issueobjectinputfiltercascheckpoint data
24