OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407)

🗓️ 28 Jul 2022 15:33:08Reported by RedHatType

OpenJDK ships Xalan-J with a truncation flaw in XSLT that can corrupt class files and run bytecode; upgrade to 2.7.3+.

Reporter	Title	Published	Views	Family All 488
ibm	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for June 2023	30 Jun 202315:51	–	ibm
ibm	Security Bulletin: Rational Performance Tester contains a vulnerability which could lead to potential remote code execution	2 Jan 202618:17	–	ibm
ibm	Security Bulletin: IBM Content Navigator is affect my Apache Xalan	30 Mar 202609:01	–	ibm
ibm	Security Bulletin: Vulnerability found in Apache Xalan Java XSLT library may affect IBM Enterprise Records	20 Oct 202211:30	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities may affect IBM® Semeru Runtime	7 Sep 202210:52	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data	15 Apr 202502:34	–	ibm
ibm	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	13 Mar 202410:54	–	ibm
ibm	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for March 2024.	15 Apr 202502:17	–	ibm
ibm	Security Bulletin: IBM Cloud Pak for Network Automation 2.5.0 fixes multiple security vulnerabilities	20 Jun 202308:52	–	ibm
ibm	Security Bulletin: IBM Planning Analytics Workspace is affected but not considered vulnerable to multiple vulnerabilities	26 Mar 202504:04	–	ibm

Vulners

Node

AND

Source	Link
access	www.access.redhat.com/security/cve/CVE-2022-34169
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-34169
cve	www.cve.org/CVERecord

27 May 2026 16:04Current

7High risk

Vulners AI Score7

CVSS 3.17.5

EPSS0.33623

SSVC