The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 or later. Note: Java runtimes (such as OpenJDK) include repackaged copies of Xalan.

References

bugzilla.redhat.com/show_bug.cgi?id=2108554

nvd.nist.gov/vuln/detail/CVE-2022-34169

www.cve.org/CVERecord?id=CVE-2022-34169

ibm 10

nvd 1

osv 13

cvelist 1

veracode 1

cbl_mariner 1

debiancve 1

github 1

atlassian 1

nessus 68

alpinelinux 1

prion 1

githubexploit 1

redhat 20

googleprojectzero 1

ubuntucve 1

debian 4

openvas 33

cnvd 1

f5 1

cve 1

gentoo 1

amazon 4

oraclelinux 8

suse 4

almalinux 5

rocky 3

centos 2

cloudlinux 1

altlinux 1

redos 1

fedora 4

photon 1

kaspersky 1

ibm

Security Bulletin: IBM Sterling B2B Integrator vulnerable to remote code execution due to Apache Xalan Java XSLT (CVE-2022-34169)

2024-04-11 13:14:32

Security Bulletin: IBM API Connect is impacted by a vulnerability in Apache Xalan Java XSLT library (CVE-2022-34169)

2022-12-01 00:42:16

Security Bulletin: Vulnerability found in Apache Xalan Java XSLT library may affect IBM Enterprise Records

2022-10-20 11:30:21

nvd

CVE-2022-34169

2022-07-19 18:15:11

osv

CVE-2022-34169

2022-07-19 18:15:11

Apache Xalan Java XSLT library integer truncation issue when processing malicious XSLT stylesheets

2022-07-20 00:00:18

bcel - security update

2022-10-18 00:00:00

cvelist

CVE-2022-34169 Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

2022-07-19 00:00:00

veracode

Remote Code Execution

2022-07-20 08:21:43

cbl_mariner

CVE-2022-34169 affecting package openjdk8 1.8.0.332-2

2024-07-26 21:09:32

debiancve

CVE-2022-34169

2022-07-19 18:15:11

github

Apache Xalan Java XSLT library integer truncation issue when processing malicious XSLT stylesheets

2022-07-20 00:00:18

atlassian

RCE (Remote Code Execution) xalan:xalan Dependency in Jira Software Data Center and Server

2024-03-07 14:45:37

nessus

Debian DSA-5256-1 : bcel - security update

2022-10-19 00:00:00

Debian DLA-3155-1 : bcel - LTS security update

2022-10-19 00:00:00

Photon OS 3.0: Openjdk11 PHSA-2022-3.0-0449

2024-07-24 00:00:00

alpinelinux

CVE-2022-34169

2022-07-19 18:15:11

prion

Integer overflow

2022-07-19 18:15:00

githubexploit

Exploit for Incorrect Conversion between Numeric Types in Apache Xalan-Java

2022-08-15 09:43:08

redhat

(RHSA-2024:3780) Important: Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available (RHBQ 3.8.4.SP2)

2024-06-10 16:27:26

(RHSA-2022:5698) Important: java-1.8.0-openjdk security, bug fix, and enhancement update

2022-07-25 14:05:42

(RHSA-2022:5700) Important: java-1.8.0-openjdk security update

2022-07-25 14:50:55

googleprojectzero

Gregor Samsa: Exploiting Java's XML Signature Verification

2022-11-02 00:00:00

ubuntucve

CVE-2022-34169

2022-07-19 00:00:00

debian

[SECURITY] [DLA 3155-1] bcel security update

2022-10-18 17:55:52

[SECURITY] [DSA 5256-1] bcel security update

2022-10-18 18:04:55

[SECURITY] [DSA 5188-1] openjdk-11 security update

2022-07-22 20:58:41

openvas

Debian: Security Advisory (DLA-3155-1)

2022-10-19 00:00:00

Debian: Security Advisory (DSA-5256-1)

2022-10-20 00:00:00

openSUSE: Security Advisory for java-1_8_0-openjdk (SUSE-SU-2022:2856-1)

2022-08-24 00:00:00

cnvd

Apache Xalan input validation error vulnerability

2022-07-21 00:00:00

K42795243 : Apache Xalan Java Library vulnerability CVE-2022-34169

2022-08-25 00:00:00

cve

CVE-2022-34169

2022-07-19 18:15:11

gentoo

Apache Commons BCEL: Remote Code Execution

2024-05-05 00:00:00

amazon

Important: java-1.8.0-openjdk

2022-09-01 21:09:00

Important: java-11-amazon-corretto

2022-07-19 01:18:00

Important: java-11-amazon-corretto

2022-07-19 00:38:00

oraclelinux

java-11-openjdk security, bug fix, and enhancement update

2022-07-26 00:00:00

java-1.8.0-openjdk security, bug fix, and enhancement update

2022-07-26 00:00:00

java-1.8.0-openjdk security, bug fix, and enhancement update

2022-07-25 00:00:00

suse

Security update for java-1_8_0-openjdk (important)

2022-08-19 00:00:00

Security update for java-11-openjdk (important)

2022-08-09 00:00:00

Security update for java-1_8_0-ibm (important)

2022-08-31 00:00:00

almalinux

Important: java-11-openjdk security, bug fix, and enhancement update

2022-07-25 00:00:00

Important: java-1.8.0-openjdk security, bug fix, and enhancement update

2022-07-25 00:00:00

Important: java-1.8.0-openjdk security, bug fix, and enhancement update

2022-07-25 00:00:00

rocky

java-11-openjdk security, bug fix, and enhancement update

2022-07-21 13:41:28

java-1.8.0-openjdk security, bug fix, and enhancement update

2022-07-25 13:45:21

java-17-openjdk security, bug fix, and enhancement update

2022-07-26 17:15:53

centos

java security update

2022-08-02 19:13:38

java security update

2022-08-02 19:14:32

cloudlinux

Fixed CVEs in java-1.8.0-openjdk: CVE-2022-21541, CVE-2022-34169, CVE-2022-21540

2022-08-04 18:46:36

altlinux

Security fix for the ALT Linux 10 package java-11-openjdk version 0:11.0.16.0.8-alt1_1jpp11

2022-08-05 00:00:00

redos

ROS-20240522-05

2024-05-22 00:00:00

fedora

[SECURITY] Fedora 35 Update: java-latest-openjdk-18.0.2.0.9-1.rolling.fc35

2022-08-03 01:49:31

[SECURITY] Fedora 36 Update: java-latest-openjdk-18.0.2.0.9-1.rolling.fc36

2022-08-03 01:27:35

[SECURITY] Fedora 36 Update: java-17-openjdk-17.0.4.0.8-1.fc36

2022-07-28 01:28:22

photon

Important Photon OS Security Update - PHSA-2022-3.0-0449

2022-09-09 00:00:00

kaspersky

KLA12588 Multiple vulnerabilities in Oracle Java SE and GraalVM

2022-07-19 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

Confidence

High

EPSS

0.002

Percentile

53.3%

JSON

Related for RH:CVE-2022-34169