Known vulnerabilities in CycloneDX Core Java
Vendor:
CycloneDX
Software:
CycloneDX Core Java
Software CPE:
cpe:2.3:a:cyclonedx:cyclonedx-core-java:*:*:*:*:*:*:*:*
Website:
https://cyclonedx.org/
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
13.1.0
13.0.0
12.2.0
12.1.0
12.0.1
12.0.0
11.0.1
11.0.0
10.2.1
10.2.0
10.1.0
10.0.0
9.1.0
9.0.5
9.0.4
9.0.3
9.0.2
9.0.1
9.0.0
8.0.3
8.0.2
8.0.1
8.0.0
7.3.2
7.3.1
7.3.0
7.2.1
7.2.0
7.1.6
7.1.5
7.1.4
7.1.3
7.1.2
7.1.1
7.1.0
7.0.0
6.0.0
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
5.0.0
4.1.2
4.1.1
4.1.0
4.0.3
4.0.2
4.0.1
4.0.0
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
2.7.0
2.6.5
2.6.4
2.6.3
2.6.2
2.6.1
2.6.0
2.5.1
2.5.0
2.1.1
2.1.0
2.0.2
2.0.1
2.0.0
1.1.2
1.1.1
1.1.0
1.0.2
1.0.1
1.0.0
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU119089 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2025-64518 |
CWE-611 | High | 11.0.1 | 03.12.2025 |
SB2025120316 SB2025120355 SB2025120424 and 1 more |
||
| #VU119088 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2024-38374 |
CWE-611 | High | 9.0.4 | 03.12.2025 |
SB2025120315 SB2026012038 |