Apache Software Foundation Apache Tika
15 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-66756 | 4.0.0-alpha-1 – < 4.0.0-beta-1 | Apache Tika: unpack endpoint in tika-server allows configuration with unsecureFeatures=false | MEDIUM 6.9 | 0.7 % | ||
| CVE-2026-66755 | 1.8 – < 3.3.2 ; 4.0.0-alpha-1 – < 4.0.0-beta-1 | Apache Tika: Arbitrary Local File Read in ISArchiveParser | MEDIUM 5.9 | 0.6 % | ||
| CVE-2022-33879 | Apache Tika – < 2.4.1 | Incomplete fix and new regex DoS in StandardsExtractingContentHandler | LOW 3.3 | 2.0 % | ||
| CVE-2022-30973 | Apache Tika – 1.28.2 | Missing fix for CVE-2022-30126 in 1.28.2 | MEDIUM 5.5 | 2.0 % | ||
| CVE-2022-30126 | Apache Tika – 1.28.1 | Apache Tika Regular Expression Denial of Service in Standards Extractor | MEDIUM 5.5 | 2.6 % | ||
| CVE-2022-25169 | Apache Tika – 1.28.1 | Apache Tika BPGParser Memory Usage DoS | MEDIUM 5.5 | 2.2 % | ||
| CVE-2021-28657 | Apache Tika – < 1.26 | Infinite loop in Apache Tika's MP3 parser | MEDIUM 5.5 | 2.7 % | ||
| CVE-2018-17197 | Apache Tika 1.8-1.19.1 | A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika. | MEDIUM 6.5 | 6.1 % | ||
| CVE-2018-11796 | Apache Tomcat 0.1 to 1.19 | In Apache Tika 1.19 (CVE-2018-11761), we added an entity expansion limit for XML parsing. However, Tika reuses SAXParsers and calls reset() | HIGH 7.5 | 7.5 % | ||
| CVE-2018-8017 | 1.2 to 1.18 | In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser. | MEDIUM 5.5 | 2.3 % | ||
| CVE-2018-11762 | 0.9 to 1.18 | In Apache Tika 0.9 to 1.18, in a rare edge case where a user does not specify an extract directory on the commandline (--extract-dir=) and t | MEDIUM 5.9 | 5.4 % | ||
| CVE-2018-11761 | 0.1 to 1.18 | In Apache Tika 0.1 to 1.18, the XML parsers were not configured to limit entity expansion. They were therefore vulnerable to an entity expan | HIGH 7.5 | 9.4 % | ||
| CVE-2018-1339 | < 1.18 | A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18. | MEDIUM 5.5 | 2.6 % | ||
| CVE-2018-1338 | < 1.18 | A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18. | MEDIUM 5.5 | 1.9 % | ||
| CVE-2018-1335 | 1.7 to 1.17 | From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands int | HIGH 8.1 | 94 % |