SX
Product
Santuario Xml Security For Java
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add Santuario Xml Security For Java to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-40690 | 7.5 | Sep 19 | Bypass of the secureValidation property Affected: before 2.1.7; 2.2.0 before 2.2.3 |
| CVE-2023-44483 | 6.5 | Oct 20 | All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be… Affected: before 2.2.6; 2.3.0 before 2.3.4; 3.0.0 before 3.0.3 |
| CVE-2019-12400 | 5.5 | Aug 23 | In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of DocumentBuilders Affected: 2.0.3 through 2.0.10; 2.1.0 before 2.1.4 |
| CVE-2014-8152 | – | Jan 21 | Apache Santuario XML Security for Java 2.0.x before 2.0.3 allows remote attackers to bypass the streaming XML signature protection mechanism via a crafted XML document Affected: 2.0.0; 2.0.1; 2.0.2 |
| CVE-2013-4517 | – | Jan 11 | Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type… Affected: through 1.5.5; 1.2.0; 1.2.1; 1.3.0; 1.4.0; 1.4.1; +12 more |
| CVE-2013-2172 | – | Aug 20 | jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to… Affected: 1.4.7; 1.5.0; 1.5.1; 1.5.2; 1.5.3; 1.5.4 |
Showing 6