CVE-2022-23437

First published: Mon Jan 24 2022(Updated: )

Apache Xerces2 Java XML Parser is vulnerable to a denial of service, caused by an infinite loop in the XML parser. By persuading a victim to open a specially-crafted XML document payloads, a remote attacker could exploit this vulnerability to consume system resources for prolonged duration.

Credit: security@apache.org security@apache.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/redhat-cve
• collector/ibm-support
• agent/author
• agent/type
• agent/remedy
• agent/first-publish-date
• agent/softwarecombine
• agent/weakness
• agent/references
• agent/severity
• agent/description
• agent/tags
• agent/event
• collector/redhat-bugzilla
• source/Red Hat
• alias/CVE-2022-23437
• agent/software-canonical-lookup
• agent/last-modified-date
• collector/nvd-api
• agent/software-canonical-lookup-request
• collector/nvd-index
• package-manager/redhat
• vendor/ibm
• canonical/ibm sterling secure proxy
• version/ibm sterling secure proxy/6.0.3
• vendor/apache
• canonical/apache xerces-j
• version/apache xerces-j/2.12.1
• vendor/oracle
• canonical/oracle agile engineering data management
• version/oracle agile engineering data management/6.2.1.0
• canonical/oracle agile plm
• version/oracle agile plm/9.3.6
• canonical/oracle banking deposits and lines of credit servicing
• version/oracle banking deposits and lines of credit servicing/2.7
• canonical/oracle banking party management
• version/oracle banking party management/2.7.0
• canonical/oracle communications asap
• version/oracle communications asap/7.3
• canonical/oracle communications element manager
• canonical/oracle communications session report manager
• canonical/oracle communications session route manager
• canonical/oracle financial services analytical applications infrastructure
• version/oracle financial services analytical applications infrastructure/8.0.6.0.0
• version/oracle financial services analytical applications infrastructure/8.0.9.0
• version/oracle financial services analytical applications infrastructure/8.1.0.0
• canonical/oracle financial services behavior detection platform
• version/oracle financial services behavior detection platform/8.0.6.0.0
• version/oracle financial services behavior detection platform/8.0.8.0
• version/oracle financial services behavior detection platform/8.1.1.0
• version/oracle financial services behavior detection platform/8.1.1.1
• version/oracle financial services behavior detection platform/8.1.2.0
• canonical/oracle financial services crime and compliance management studio
• version/oracle financial services crime and compliance management studio/8.0.8.2.0
• version/oracle financial services crime and compliance management studio/8.0.8.3.0
• canonical/oracle financial services enterprise case management
• version/oracle financial services enterprise case management/8.0.7.1
• version/oracle financial services enterprise case management/8.0.7.2.0
• version/oracle financial services enterprise case management/8.0.8.0
• version/oracle financial services enterprise case management/8.0.8.1
• version/oracle financial services enterprise case management/8.1.1.0
• version/oracle financial services enterprise case management/8.1.1.1
• canonical/oracle flexcube universal banking
• version/oracle flexcube universal banking/12.4.0
• canonical/oracle global lifecycle management nextgen oui framework
• version/oracle global lifecycle management nextgen oui framework/13.9.4.2.2
• canonical/oracle global lifecycle management opatch
• canonical/oracle health sciences information manager
• version/oracle health sciences information manager/3.0.1
• version/oracle health sciences information manager/3.0.5
• version/oracle health sciences information manager/3.0.0.1
• canonical/oracle ilearning
• version/oracle ilearning/6.2
• version/oracle ilearning/6.3
• canonical/oracle peoplesoft enterprise peopletools
• version/oracle peoplesoft enterprise peopletools/8.58
• version/oracle peoplesoft enterprise peopletools/8.59
• canonical/oracle primavera gateway
• version/oracle primavera gateway/17.7
• version/oracle primavera gateway/17.12.11
• version/oracle primavera gateway/18.8.0
• version/oracle primavera gateway/18.8.14
• version/oracle primavera gateway/19.12.0
• version/oracle primavera gateway/19.12.13
• version/oracle primavera gateway/20.12.0
• version/oracle primavera gateway/20.12.8
• canonical/oracle product lifecycle analytics
• version/oracle product lifecycle analytics/3.6.1
• canonical/oracle retail bulk data integration
• version/oracle retail bulk data integration/16.0.3.0
• canonical/oracle retail extract transform and load
• version/oracle retail extract transform and load/13.2.8
• canonical/oracle retail financial integration
• version/oracle retail financial integration/14.1.3.2
• version/oracle retail financial integration/15.0.3.1
• version/oracle retail financial integration/16.0.3
• version/oracle retail financial integration/19.0.1
• canonical/oracle retail integration bus
• version/oracle retail integration bus/14.1.3.2
• version/oracle retail integration bus/15.0.3.1
• version/oracle retail integration bus/16.0.3
• version/oracle retail integration bus/19.0.1
• canonical/oracle retail merchandising system
• version/oracle retail merchandising system/16.0.3
• version/oracle retail merchandising system/19.0.1
• canonical/oracle retail service backbone
• version/oracle retail service backbone/14.1.3.2
• version/oracle retail service backbone/15.0.3.1
• version/oracle retail service backbone/16.0.3
• version/oracle retail service backbone/19.0.1
• canonical/oracle weblogic server
• version/oracle weblogic server/12.2.1.3.0
• version/oracle weblogic server/12.2.1.4.0
• version/oracle weblogic server/14.1.1.0.0
• vendor/netapp
• canonical/netapp active iq unified manager windows