IT
Product
Itext
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 5Low 0
Watch
Add Itext to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-43113 | 9.8 | Dec 15 | iTextPDF in iText 7 and up to (excluding 4.4.13.3) 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs (aka Ghostscript) command line in… Affected: 7.0.0 before 7.1.17 |
| CVE-2017-9096 | 8.8 | Nov 8 | The XML parsers in iText before 5.5.12 and 7.x before 7.0.3 do not disable external entities, which might allow remote attackers to conduct XML external entity (XXE) attacks via a… Affected: before 5.5.12; 7.0.0; 7.0.1; 7.0.2 |
| CVE-2023-6299 | 6.5 | Nov 26 | A vulnerability, which was classified as problematic, has been found in Apryse iText 8.0.1 Affected: 8.0.1 |
| CVE-2023-6298 | 6.5 | Nov 26 | A vulnerability classified as problematic was found in Apryse iText 8.0.2 Affected: 8.0.2 |
| CVE-2022-24198 | 6.5 | Feb 1 | iText v7.1.17 was discovered to contain an out-of-bounds exception via the component ARCFOUREncryption.encryptARCFOUR, which allows attackers to cause a Denial of Service (DoS)… Affected: 7.1.17 |
| CVE-2022-24197 | 6.5 | Feb 1 | iText v7.1.17 was discovered to contain a stack-based buffer overflow via the component ByteBuffer.append, which allows attackers to cause a Denial of Service (DoS) via a crafted… Affected: before 7.2.2 |
| CVE-2022-24196 | 6.5 | Feb 1 | iText v7.1.17, up to (exluding)": 7.1.18 and 7.2.2 was discovered to contain an out-of-memory error via the component readStreamBytesRaw, which allows attackers to cause a Denial… Affected: before 7.2.2 |
Showing 7