Xerces2 Java

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:xerces2_java:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductXerces2 Java (cb770e6a-b4b0-5188-8771-0e477ff4752a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:apache/xerces purl2cpe 2026-06-01 10:14:24.519871
pkg:deb/debian/libxerces2-java purl2cpe 2026-06-01 10:14:24.519874
pkg:deb/ubuntu/libxerces2-java purl2cpe 2026-06-01 10:14:24.519877
pkg:github/apache/xerces2-j purl2cpe 2026-06-01 10:14:24.519879

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4002 vulnerable 2026-06-08 05:04:33.500474 Details available
XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, Java SE Embedded 7u40 and earlier, and possibly other products allows remote attackers to cause a denial of service via vectors related to XML attribute names.
Published: 2013-07-23T10:00:00.000Z
Updated: 2024-08-06T16:30:49.315Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0881 vulnerable 2026-06-08 05:00:46.174473 Details available
Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service (CPU consumption) via a crafted message to an XML service, which triggers hash table collisions.
Published: 2017-10-30T16:00:00.000Z
Updated: 2024-08-06T18:38:15.063Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.