Apache Software Foundation Apache Xerces

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2022-23437Apache XercesJ – 2.12.1Infinite loop within Apache XercesJ xml parserMEDIUM 6.512 %