Lucene search
K

8 matches found

Positive Technologies
Positive Technologies
added 2026/05/08 12:0 a.m.9 views

PT-2026-38773

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS6AI score0.17342EPSS
Exploits2References26
Positive Technologies
Positive Technologies
added 2026/05/06 12:0 a.m.5 views

PT-2026-37752

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS6AI score0.17342EPSS
Exploits2References26
F5 Networks
F5 Networks
added 2023/02/21 6:31 p.m.194 views

K42795243: Apache Xalan Java Library vulnerability CVE-2022-34169

Security Advisory Description The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. The Apache Xalan Jav...

7.5CVSS8.2AI score0.17342EPSS
Exploits2Affected Software1
RedHat Linux
RedHat Linux
added 2022/07/28 3:45 p.m.4 views

OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407)

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

7.5CVSS7AI score0.17342EPSS
Exploits2References4
CNVD
CNVD
added 2022/07/21 12:0 a.m.82 views

Apache Xalan Input Validation Error Vulnerability

Apache Xalan is an open source software library from the Apache Foundation USA. Apache Xalan Java XSLT Stock in Input Validation Error vulnerability stems from an integer truncation issue when processing malicious XSLT stylesheets. The vulnerability can be exploited to corrupt Java class files...

7.5CVSS8.2AI score0.17342EPSS
Exploits2References1
Veracode
Veracode
added 2022/07/20 8:21 a.m.141 views

Remote Code Execution

xalan:xalan is vulnerable to remote code execution. An attacker is able to corrupt Java class files generated by the internal XSLTC compiler and execute harmful Java bytecodes on the host machine due to an integer truncation flaw which occurs during XSLT style sheet processing...

7.5CVSS8.5AI score0.17342EPSS
Exploits2References31Affected Software9
Github Security Blog
Github Security Blog
added 2022/07/20 12:0 a.m.70 views

Apache Xalan Java XSLT library integer truncation issue when processing malicious XSLT stylesheets

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. A fix for this issue was published in September 20...

7.5CVSS8.2AI score0.17342EPSS
Exploits2References37Affected Software1
Cvelist
Cvelist
added 2022/07/19 12:0 a.m.30 views

CVE-2022-34169 Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

8.2AI score0.17342EPSS
Exploits2References24
Rows per page
Query Builder