Design/Logic Flaw

2022-01-2415:15:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.8%

JSON

There’s a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present within XercesJ version 2.12.1 and the previous versions.

CPENameOperatorVersion
xerces-jle2.12.1
agile_engineering_data_managementeq6.2.1.0
agile_plmeq9.3.6
banking_deposits_and_lines_of_credit_servicingeq2.7
banking_party_managementeq2.7.0
communications_asapeq7.3
communications_element_managerlt9.0
communications_session_report_managerlt9.0
communications_session_route_managerlt9.0
financial_services_analytical_applications_infrastructurege8.0.6.0.0

Name	Operator	Version
xerces-j	le	2.12.1
agile_engineering_data_management	eq	6.2.1.0
agile_plm	eq	9.3.6
banking_deposits_and_lines_of_credit_servicing	eq	2.7
banking_party_management	eq	2.7.0
communications_asap	eq	7.3
communications_element_manager	lt	9.0
communications_session_report_manager	lt	9.0
communications_session_route_manager	lt	9.0
financial_services_analytical_applications_infrastructure	ge	8.0.6.0.0