CVE-2022-34169

CVE-2022-34169 affects the Apache Xalan Java XSLT library. It describes an integer truncation vulnerability when processing malicious XSLT stylesheets, which can corrupt Java class files generated by the internal XSLTC compiler and allow execution of arbitrary Java bytecode. Public references in ...

CVE-2014-0107

CVE-2014-0107 concerns the TransformerFactory in Apache Xalan-Java before 2.7.2, which does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, potentially allowing remote attackers to bypass restrictions and load arbitrary classes or access external reso...