Lucene search
+L
ApacheCommons Jxpath

2 matches found

CVE
CVE
added 2022/10/06 12:0 a.m.88 views

CVE-2022-40160

CVE-2022-40160 describes a Denial of Service in JXPath due to a stack-based buffer overflow while parsing XPath. Connected IBM bulletins note this affects IBM Content Navigator components (JXPath package) and provide remediation: upgrade to IBM Content Navigator 3.0.12 IF004 or 3.0.11 IF008 plus ...

6.5CVSS6.3AI score0.01267EPSS
Save
CVE
CVE
added 2022/10/06 12:0 a.m.86 views

CVE-2022-40159

CVE-2022-40159 concerns a DoS due to a stack-based buffer overflow in parsing XPath by JXPath. The CVE entry is explicitly marked as DISPUTED/invalid in multiple sources (NVD OSV/GHSA withdrawals), and no confirmatory public technical details are provided beyond the described overflow. IBM bullet...

6.5CVSS6.2AI score0.01267EPSS
Save