Skip to main content
Components
Vulnerabilities
Security Events
Pricing
MCP
API
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
xerces/xercesImpl 2.12.0 | Vulnerabilities | Sonatype Guide
Get full component data and automated fixes with Sonatype Guide.
Sign up for free
maven
xerces
xercesImpl
2.12.0
xercesImpl 2.12.0
xerces
Published
Jun 22, 2018
•
Policy
compliance
maven Registry
Developer Trust Score
Recommended Version:
x.y.z
Recommended upgrade that meets your policy.
Compare Versions
Overview
Overview
Versions
20
Versions
20
Vulnerabilities
3
Vulnerabilities
3
Dependencies
1
Dependencies
1
Reset filters
Severity
Critical
(0)
High
(0)
Medium
(2)
Low
(0)
CVSS Score
0.0
10.0
EPSS Score
0.0
1.0
Malware
KEV Status
Published
Filter
Sort: Published (Newest first)
6.5
CVE-2022-23437
There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present within XercesJ version 2.12.1 and the previous versions.
affected
Severity
Medium
Published
Jan 25, 2022
5.9
sonatype-2017-0348
sonatype-2017-0348 - xerces:xercesImpl - Denial of Service (DoS)
affected
Severity
Medium
Published
Sep 15, 2017
