Known vulnerabilities in Apache Santuario XML Security for Java

Software CPE: cpe:2.3:a:apache_foundation:apache_santuario_xml_security_for_java:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Santuario XML Security for Java Apache Santuario XML Security for Java is affected by 7 known vulnerabilities: 1 high, 6 medium Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83241 - Information Exposure Through Log Files
CVE-2023-44483
CWE-532 Medium
No
No
2.2.6, 2.3.4, 3.0.3 17.11.2023 SB2023111724
SB2023111747
SB2023120143
and 76 more
#VU73270 - Improper Verification of Cryptographic Signature
CVE-2013-2172
CWE-347 Medium
No
No
1.4.8, 1.5.5 13.03.2023 SB2013082106
#VU73269 - Memory corruption
CVE-2013-4517
CWE-119 Medium
No
No
1.5.6 13.03.2023 SB2014011102
SB2014102805
#VU73268 - Improper Verification of Cryptographic Signature
CVE-2014-8152
CWE-347 Medium
No
No
2.0.3 13.03.2023 SB2015012111
SB2023031406
#VU71210 - Improper input validation
CVE-2022-47966
CWE-20 High
Available
Exploited
2.3.2, 3.0.1 17.01.2023 SB2023011717
SB2023011718
#VU58198 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40690
CWE-200 Medium
No
No
2.1.7, 2.2.3 16.11.2021 SB2021111622
SB2021111712
SB2022012032
and 37 more
#VU20401 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-12400
CWE-611 Medium
No
No
2.1.4 26.08.2019 SB2019082712
SB2020031305
SB2021101936
and 1 more