SX
Product
Santuario Xml Security For Java
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add Santuario Xml Security For Java to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-44483 | 6.5 | Oct 20 | All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be… Affected: before 2.2.6; 2.3.0 before 2.3.4; 3.0.0 before 3.0.3 |
| CVE-2019-12400 | 5.5 | Aug 23 | In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of DocumentBuilders Affected: 2.0.3 through 2.0.10; 2.1.0 before 2.1.4 |
Showing 2