Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2022-23437

There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present within XercesJ version 2.12.1 and the previous versions.

CVSS v3:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS v2:

  • Severity: High
  • Score: 7.1
  • AV:N/AC:M/Au:N/C:N/I:N/A:C

CWEs:

OWASP TOP 10:

Software From Fixed in
apache / xerces-j - 2.12.1.x
oracle / ilearning 6.2 6.2.x
oracle / flexcube_universal_banking 12.4.0 12.4.0.x
oracle / weblogic_server 12.2.1.3.0 12.2.1.3.0.x
oracle / agile_plm 9.3.6 9.3.6.x
oracle / weblogic_server 12.2.1.4.0 12.2.1.4.0.x
oracle / peoplesoft_enterprise_peopletools 8.58 8.58.x
oracle / weblogic_server 14.1.1.0.0 14.1.1.0.0.x
oracle / retail_bulk_data_integration 16.0.3.0 16.0.3.0.x
oracle / retail_merchandising_system 16.0.3 16.0.3.x
oracle / global_lifecycle_management_nextgen_oui_framework 13.9.4.2.2 13.9.4.2.2.x
oracle / agile_engineering_data_management 6.2.1.0 6.2.1.0.x
oracle / retail_service_backbone 16.0.3 16.0.3.x
oracle / retail_financial_integration 16.0.3 16.0.3.x
oracle / retail_integration_bus 16.0.3 16.0.3.x
oracle / peoplesoft_enterprise_peopletools 8.59 8.59.x
oracle / retail_service_backbone 15.0.3.1 15.0.3.1.x
oracle / retail_service_backbone 14.1.3.2 14.1.3.2.x
oracle / financial_services_enterprise_case_management 8.0.7.2.0 8.0.7.2.0.x
oracle / banking_party_management 2.7.0 2.7.0.x
oracle / retail_merchandising_system 19.0.1 19.0.1.x
oracle / retail_integration_bus 14.1.3.2 14.1.3.2.x
oracle / retail_financial_integration 14.1.3.2 14.1.3.2.x
oracle / retail_extract_transform_and_load 13.2.8 13.2.8.x
oracle / retail_integration_bus 15.0.3.1 15.0.3.1.x
oracle / retail_financial_integration 15.0.3.1 15.0.3.1.x
oracle / communications_asap 7.3 7.3.x
oracle / ilearning 6.3 6.3.x
oracle / retail_service_backbone 19.0.1 19.0.1.x
oracle / retail_integration_bus 19.0.1 19.0.1.x
oracle / retail_financial_integration 19.0.1 19.0.1.x
oracle / product_lifecycle_analytics 3.6.1 3.6.1.x
oracle / financial_services_enterprise_case_management 8.0.8.1 8.0.8.1.x
oracle / financial_services_enterprise_case_management 8.1.1.0 8.1.1.0.x
oracle / financial_services_enterprise_case_management 8.1.1.1 8.1.1.1.x
oracle / financial_services_behavior_detection_platform 8.1.2.0 8.1.2.0.x
oracle / financial_services_behavior_detection_platform 8.1.1.1 8.1.1.1.x
oracle / financial_services_behavior_detection_platform 8.1.1.0 8.1.1.0.x
oracle / financial_services_enterprise_case_management 8.0.7.1 8.0.7.1.x
oracle / financial_services_enterprise_case_management 8.0.8.0 8.0.8.0.x
oracle / communications_element_manager - 9.0
oracle / financial_services_analytical_applications_infrastructure 8.0.6.0.0 8.0.9.0.x
oracle / communications_session_report_manager - 9.0
oracle / financial_services_behavior_detection_platform 8.0.6.0.0 8.0.8.0.x
oracle / financial_services_analytical_applications_infrastructure 8.1.0.0 8.1.2.0
oracle / communications_session_route_manager - 9.0
oracle / financial_services_crime_and_compliance_management_studio 8.0.8.2.0 8.0.8.2.0.x
oracle / financial_services_crime_and_compliance_management_studio 8.0.8.3.0 8.0.8.3.0.x
oracle / global_lifecycle_management_nextgen_oui_framework - 13.9.4.2.2
oracle / primavera_gateway 19.12.0 19.12.13.x
oracle / primavera_gateway 18.8.0 18.8.14.x
oracle / global_lifecycle_management_opatch - 12.2.0.1.30
oracle / health_sciences_information_manager 3.0.1 3.0.5.x
oracle / health_sciences_information_manager 3.0.0.1 3.0.0.1.x
oracle / banking_deposits_and_lines_of_credit_servicing 2.7 2.7.x
oracle / primavera_gateway 20.12.0 20.12.8.x
oracle / primavera_gateway 17.7 17.12.11.x
xerces / xercesImpl - 2.12.2