Known vulnerabilities in Apache FOP

Vendor: Apache Foundation
Software: Apache FOP
Software CPE: cpe:2.3:a:apache_foundation:apache_fop:*:*:*:*:*:*:*:*
Website: https://www.apache.org
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.9

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache FOP Apache FOP is affected by 2 known vulnerabilities: 2 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98498 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28168		 CWE-611 Medium
No
No
 2.10 14.10.2024 SB2024101462
SB2024101465
SB2024112829
and 18 more
#VU6634 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2017-5661		 CWE-611 Medium
No
No
 2.2 23.05.2017 SB2017052101
SB2017041907
SB2017053004
and 3 more