apache__uima-uimaj_CVE-2022-32287_3-3-0

Welcome to the Apache UIMA Java SDK Apache UIMAUIMA helps you managing unstructured data such as texts that is enriched useful information. For example, if you want to identify a mention of an entity in a text or possible link that entity to a reference dataset, then Apache UIMA provides: a...

Security Bulletin: Apache uimaj-core.jar security vulnerability CVE-2022-32287 and CVE-2023-39913 in FileNet Content Manager (FNCM) / IBM Content Cortex(CCx) component Content Search Services (CSS) / Enterprise Content Management Text Search (ECMTS)

Summary Apache uimaj-core.jar security vulnerability CVE-2022-32287 and CVE-2023-39913 in FileNet Content Manager FNCM / IBM Content CortexCCx component Content Search Services CSS / Enterprise Content Management Text Search ECMTS Vulnerability Details Refer to the security bulletins listed in th...

Security Bulletin: Apache uimaj-core.jar security vulnerability CVE-2017-15691

Summary Apache uimaj-core.jar security vulnerability CVE-2017-15691 in FileNet Content Manager FNCM Content Search Services CSS/Enterprise Content Management Text Search ECMTS. CSS/ECMTS is affected and is potentially vulnerable. Vulnerability Details CVEID:CVE-2017-15691 DESCRIPTION: Apache uima...

Deserialization Of Untrusted Data

uimaj-tools is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to deserializing Java objects without proper data verification when users or developers utilize the CasIOUtils class in their applications and services to parse serialized CAS data. This weakness can...

Path Traversal

uimaj-core is vulnerable to path traversal. The vulnerability is due to FileUtil.java, which allows an attacker to create files outside the designated target directory using carefully crafted zip file names...

com.digitalpebble.behemoth:behemoth-uima (>=1.0, <=1.1), com.sproutigy.libs.luceneplus:luceneplus-full (>=1.0.0, <=1.1.0) +47 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (2.3.1)

org.apache.uima:uimaj-core MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.uima:uimaj-core and may be impacted: - com.digitalpebble.behemoth:behemoth-uima =1.0, =1.0.0, =1.6.0, =2.1.0, =2.0.0, =2.2.0, =1.0.0,...

com.github.lafa.tikanoexternal:tika-parsers (>=1.0.0, <=1.0.18), de.tudarmstadt.ukp.dkpro.core:de.tudarmstadt.ukp.dkpro.core.api.anomaly-asl (1.4.0) +140 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (2.4.0)

org.apache.uima:uimaj-core MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.uima:uimaj-core and may be impacted: - com.github.lafa.tikanoexternal:tika-parsers =1.0.0, =1.0.18 -...

com.github.document-analysis:dap-dkpro_1_8 (0.1.1), com.github.document-analysis:dap-uimafit (0.1.1) +49 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (2.10.0)

org.apache.uima:uimaj-core MAVEN version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.uima:uimaj-core and may be impacted: - com.github.document-analysis:dap-dkpro18 0.1.1 - com.github.document-analysis:dap-uimafit 0.1.1 -...

de.averbis.textanalysis:adverse-event-typesystem (>=0.16.0, <=1.9.0), de.averbis.textanalysis:anatomy-typesystem (2.38.0) +249 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (2.10.3)

org.apache.uima:uimaj-core MAVEN version 2.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.uima:uimaj-core and may be impacted: - de.averbis.textanalysis:adverse-event-typesystem =0.16.0, =2.25.0, =3.21.0, =2.25.0, =2.25.0, =2.25.0,...

de.julielab:jcore-ace-reader (>=2.3.0, <=2.3.10), de.julielab:jcore-acronym-ae (>=2.3.0, <=2.3.10) +341 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (2.10.2)

org.apache.uima:uimaj-core MAVEN version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.uima:uimaj-core and may be impacted: - de.julielab:jcore-ace-reader =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3....

cloud.testload:jmeter-clickhouse-listener (2.00), com.bobpaulin.jmeter:aws-include-controller-plugin (0.0.1) +297 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (>=3.0.0-alpha, <=3.3.0)

org.apache.uima:uimaj-core MAVEN version =3.0.0-alpha, =3.11.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =0.0.1, =1.1.1, =0.0.1, =1.1.6 and more Source cves: CVE-2022-32287 Source advisory: OSV:GHSA-XGQR-5WQW-9FPV...

com.dictanova.jcasgen:com.dictanova.jcasgen.gradle.plugin (>=0.3, <=0.4), gradle.plugin.com.dictanova.jcasgen.gradle:gradle-jcasgen-plugin (>=0.3, <=0.4) +19 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (2.7.0)

org.apache.uima:uimaj-core MAVEN version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.uima:uimaj-core and may be impacted: - com.dictanova.jcasgen:com.dictanova.jcasgen.gradle.plugin =0.3, =0.3, =0.4 -...

com.github.heideltime:heideltime (>=2.0.1, <=2.2.1), com.github.jenshaase.uimascala:arktweetpostagger_2.11 (0.6.1) +197 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (2.8.1)

org.apache.uima:uimaj-core MAVEN version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.uima:uimaj-core and may be impacted: - com.github.heideltime:heideltime =2.0.1, =2.2.1 - com.github.jenshaase.uimascala:arktweetpostagger2.11 0.6....

org.apache.uima:jcasgen-maven-plugin (2.10.1), org.apache.uima:pearpackagingmavenplugin (2.10.1) +12 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (2.10.1)

org.apache.uima:uimaj-core MAVEN version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.uima:uimaj-core and may be impacted: - org.apache.uima:jcasgen-maven-plugin 2.10.1 - org.apache.uima:pearpackagingmavenplugin 2.10.1 -...

org.apache.uima:jcasgen-maven-plugin (2.4.1), org.apache.uima:pearpackagingmavenplugin (2.4.1) +9 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (2.4.1)

org.apache.uima:uimaj-core MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.uima:uimaj-core and may be impacted: - org.apache.uima:jcasgen-maven-plugin 2.4.1 - org.apache.uima:pearpackagingmavenplugin 2.4.1 -...

cloud.testload:jmeter-clickhouse-listener (2.00), com.bobpaulin.jmeter:aws-include-controller-plugin (0.0.1) +297 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (>=3.0.0-alpha, <=3.3.0)

org.apache.uima:uimaj-core MAVEN version =3.0.0-alpha, =3.11.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =0.0.1, =1.1.1, =0.0.1, =1.1.6 and more Source cves: CVE-2022-32287 Source advisory: GHSA-XGQR-5WQW-9FPV...

de.unistuttgart.ims:cleartk-util (>=0.1.0, <=0.2.0), org.apache.uima:jcasgen-maven-plugin (2.5.0) +56 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (2.5.0)

org.apache.uima:uimaj-core MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.uima:uimaj-core and may be impacted: - de.unistuttgart.ims:cleartk-util =0.1.0, =0.2.0 - org.apache.uima:jcasgen-maven-plugin 2.5.0 -...

ch.epfl.bbp.nlp:bluima_abbreviations (>=1.0.0, <=1.0.1), ch.epfl.bbp.nlp:bluima_corpora (>=1.0.0, <=1.0.1) +612 more potentially affected by CVE-2017-15691 via org.apache.uima:uimaj-core (>=2.3.1, <=2.10.1)

org.apache.uima:uimaj-core MAVEN version =2.3.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 - ch.epfl.bbp.nlp:bluimatypesystem 1.0.1 and more Source cves: CVE-2017-15691 Source advisory: GHSA-WP2F-HRG2-3R5M...

edu.cmu.lti.oaqa.bio.core:baseqa (1.10.3), edu.cmu.lti.oaqa.core:baseqa (>=2.0.0, <=2.0.1) +23 more potentially affected by CVE-2017-15691 via org.apache.uima:uimaj-as-core (>=2.3.1, <=2.9.0)

org.apache.uima:uimaj-as-core MAVEN version =2.3.1, =2.0.0, =2.3.3, =2.4.0, =2.5.0, =1.0.0, =1.0.0, =1.0.0, =2.0.0, =2.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.2.1 and more Source cves: CVE-2017-15691 Source advisory: GHSA-WP2F-HRG2-3R5M...

ch.epfl.bbp.nlp:bluima_abbreviations (>=1.0.0, <=1.0.1), ch.epfl.bbp.nlp:bluima_corpora (>=1.0.0, <=1.0.1) +612 more potentially affected by CVE-2017-15691 via org.apache.uima:uimaj-core (>=2.3.1, <=2.10.1)

org.apache.uima:uimaj-core MAVEN version =2.3.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 - ch.epfl.bbp.nlp:bluimatypesystem 1.0.1 and more Source cves: CVE-2017-15691 Source advisory: OSV:GHSA-WP2F-HRG2-3R5M...