CVE-2022-34169 vulnerability in Apache and Other Products
Published on July 19, 2022
Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets
The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 or later. Note: Java runtimes (such as OpenJDK) include repackaged copies of Xalan.
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
NVD
Products Associated with CVE-2022-34169
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2022-34169 are published in these products:
Affected Versions
Apache Software Foundation Apache Xalan-J:- Version Xalan-J, <= 2.7.2 is affected.
Exploit Probability
EPSS
6.66%
Percentile
91.03%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.