CVE-2022-28890

🗓️ 22 May 2025 22:43:41Reported by redhat.comType

Vulnerability in Apache Jena allows external DTD retrieval, affecting versions 4.4.0 and earlier.

Reporter	Title	Published	Views	Family All 27
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Management is impacted by vulnerabilities in Apache Jena	13 Jan 202508:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Jazz Reporting Service is affected by RDF/XML parser of Apache Jena	14 Jul 202611:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect for Virtual Environments is vulnerable to arbitrary code execution, sensitive information disclosure, and denial of service due to CVEs in Apache Velocity, Apache Jena, and XStream (woodstox)	17 Nov 202323:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Optimization - Publishing is vulnerable to a remote attack due to Apache Jena Core	4 Oct 202308:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus is vulnerable to a remote attack due to Apache Jena (CVE-2021-39239, CVE-2022-28890, CVE-2023-22665).	3 Jul 202318:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities fixed in 9.7.2.7	24 Oct 202411:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Jazz Reporting Service is vulnerable to XML external entity (XXE) attacks due to a vulnerability in XML processing in Apache Jena, in versions up to 4.1.0 (CVE-2021-39239)	4 Oct 202307:46	–	ibm
ATTACKERKB	CVE-2022-28890	5 May 202209:15	–	attackerkb
Circl	CVE-2022-28890	5 May 202212:36	–	circl
CNNVD	Apache Jena 代码问题漏洞	5 May 202200:00	–	cnnvd