Apache Xml Graphics
Approved changes feed: RSS · Atom
cpe:2.3:a:apache_software_foundation:apache_xml_graphics:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a) |
|---|---|
| Product | Apache Xml Graphics (46b65160-6016-5845-a5c5-545203c2eaf3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-42890 |
vulnerable | 2026-06-08 05:49:30.650135 |
Apache Batik prior to 1.16 allows RCE via scripting
A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.
Published: 2022-10-25T00:00:00.000Z
Updated: 2024-08-03T13:19:05.216Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41704 |
vulnerable | 2026-06-08 05:48:30.822376 |
Apache Batik prior to 1.16 allows RCE when loading untrusted SVG input
A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16. It is recommended to update to version 1.16.
Published: 2022-10-25T00:00:00.000Z
Updated: 2026-02-25T16:56:27.451Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40146 |
vulnerable | 2026-06-08 05:48:24.045558 |
Jar url should be blocked by DefaultScriptSecurity
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14.
Published: 2022-09-22T00:00:00.000Z
Updated: 2025-11-03T19:27:34.505Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38648 |
vulnerable | 2026-06-08 05:47:16.732831 |
PDFTranscoder does not block external resources
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.
Published: 2022-09-22T00:00:00.000Z
Updated: 2025-11-03T19:27:25.993Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38398 |
vulnerable | 2026-06-08 05:47:16.306502 |
Server-Side Request Forgery Information Disclosure Vulnerability
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14.
Published: 2022-09-22T00:00:00.000Z
Updated: 2025-11-03T19:27:24.506Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.