Approved changes feed: RSS · Atom

cpe:2.3:a:apache:jena:4.4.0:*:*:*:*:*:*:*

part: a version: 4.4.0 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductJena (2ba96062-b3a1-5ba3-9090-9158b16944cc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/jena purl2cpe 2026-06-01 10:14:28.178878
pkg:bitbucket/abhranilfk/jena purl2cpe 2026-06-01 10:14:28.178879
pkg:deb/debian/libapache-jena-java purl2cpe 2026-06-01 10:14:28.178881
pkg:deb/ubuntu/libapache-jena-java purl2cpe 2026-06-01 10:14:28.178882
pkg:gem/jena purl2cpe 2026-06-01 10:14:28.178883
pkg:github/apache/jena purl2cpe 2026-06-01 10:14:28.178884
pkg:maven/org.apache.jena/jena purl2cpe 2026-06-01 10:14:28.178886
pkg:maven/org.apache.jena/jena-core purl2cpe 2026-06-01 10:14:28.178887
pkg:sourceforge/jena purl2cpe 2026-06-01 10:14:28.178888

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-28890 vulnerable 2026-06-08 05:42:46.038420 Processing external DTDs
A vulnerability in the RDF/XML parser of Apache Jena allows an attacker to cause an external DTD to be retrieved. This issue affects Apache Jena version 4.4.0 and prior versions. Apache Jena 4.2.x and 4.3.x do not allow external entities.
Published: 2022-05-05T08:40:09.000Z
Updated: 2024-08-03T06:10:56.881Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.