{"schema_version":"1","data":[{"id":22262,"advisory_id":"cc9c80f1-068c-4897-935c-871b72c90531","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-29824","source_published_at":"2022-05-03T00:00:00+00:00","published_at":"2026-10-25T05:59:20.184616+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2022-29824"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-29824","summary":"In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.","evidence":"cve:CVE-2022-29824","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-29824","aliases":["CVE-2022-29824"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T16:29:18.083Z","provider":"cve","references":["https://gitlab.gnome.org/GNOME/libxslt/-/tags","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZOBT5Y6Y2QLDDX2HZGMV7MJMWGXORKK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P5363EDV5VHZ5C77ODA43RYDCPMA7ARM/","https://lists.debian.org/debian-lts-announce/2022/05/msg00023.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3NVZVWFRBXBI3AKZZWUWY6INQQPQVSF/","https://www.debian.org/security/2022/dsa-5142","https://www.oracle.com/security-alerts/cpujul2022.html","https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.9.14","https://gitlab.gnome.org/GNOME/libxml2/-/commit/2554a2408e09f13652049e5ffb0d26196b02ebab","https://gitlab.gnome.org/GNOME/libxml2/-/commit/6c283d83eccd940bcde15634ac8c7f100e3caefd","https://security.netapp.com/advisory/ntap-20220715-0006/","https://security.gentoo.org/glsa/202210-03"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://gitlab.gnome.org/GNOME/libxslt/-/tags","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZOBT5Y6Y2QLDDX2HZGMV7MJMWGXORKK/","name":"FEDORA-2022-9136d646e4","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P5363EDV5VHZ5C77ODA43RYDCPMA7ARM/","name":"FEDORA-2022-be6d83642a","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/05/msg00023.html","name":"[debian-lts-announce] 20220516 [SECURITY] [DLA 3012-1] libxml2 security update","tags":["mailing-list","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3NVZVWFRBXBI3AKZZWUWY6INQQPQVSF/","name":"FEDORA-2022-f624aad735","tags":["vendor-advisory","x_transferred"]},{"url":"https://www.debian.org/security/2022/dsa-5142","name":"DSA-5142","tags":["vendor-advisory","x_transferred"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","tags":["x_transferred"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.9.14","tags":["x_transferred"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/commit/2554a2408e09f13652049e5ffb0d26196b02ebab","tags":["x_transferred"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/commit/6c283d83eccd940bcde15634ac8c7f100e3caefd","tags":["x_transferred"]},{"url":"http://packetstormsecurity.com/files/167345/libxml2-xmlBufAdd-Heap-Buffer-Overflow.html","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20220715-0006/","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202210-03","name":"GLSA-202210-03","tags":["vendor-advisory","x_transferred"]},{"url":"http://packetstormsecurity.com/files/169825/libxml2-xmlParseNameComplex-Integer-Overflow.html","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T06:33:42.645Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T16:29:18.083Z"}}],"cna":{"orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre","dateUpdated":"2022-11-14T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-29824","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22261,"advisory_id":"57e6fb7f-3a3c-4e54-886d-b631a8fcbef0","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-29155","source_published_at":"2022-05-04T19:06:09+00:00","published_at":"2026-10-25T05:59:19.58779+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2022-29155"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-29155","summary":"In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.","evidence":"cve:CVE-2022-29155","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-29155","aliases":["CVE-2022-29155"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T16:29:16.639Z","provider":"cve","references":["https://bugs.openldap.org/show_bug.cgi?id=9815","https://www.debian.org/security/2022/dsa-5140","https://lists.debian.org/debian-lts-announce/2022/05/msg00032.html","https://security.netapp.com/advisory/ntap-20220609-0007/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://bugs.openldap.org/show_bug.cgi?id=9815","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.debian.org/security/2022/dsa-5140","name":"DSA-5140","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/05/msg00032.html","name":"[debian-lts-announce] 20220524 [SECURITY] [DLA 3017-1] openldap security update","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20220609-0007/","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T06:10:59.269Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T16:29:16.639Z"}}],"cna":{"orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre","dateUpdated":"2022-06-09T18:06:18.000Z"}}},"related_cves":[{"value":"CVE-2022-29155","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22260,"advisory_id":"88472b8e-38b3-476c-9a35-cc5201b1ecb9","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-28321","source_published_at":"2022-09-19T21:10:22+00:00","published_at":"2026-10-25T05:59:18.949089+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2022-28321"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-28321","summary":"The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pam_access.so module doesn't correctly restrict login if a user tries to connect from an IP address that is not resolvable via DNS. In such conditions, a user with denied access to a machine can still get access. NOTE: the relevance of this issue is largely limited to openSUSE Tumbleweed and openSUSE Factory; it does not affect Linux-PAM upstream.","evidence":"cve:CVE-2022-28321","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-28321","aliases":["CVE-2022-28321"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T16:29:15.106Z","provider":"cve","references":["https://www.suse.com/security/cve/CVE-2022-28321.html","https://bugzilla.suse.com/show_bug.cgi?id=1197654"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://download.opensuse.org/source/distribution/openSUSE-current/repo/oss/src/","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28321.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1197654","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T05:48:37.939Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-28321","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-05-29T15:30:31.022148Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-287","description":"CWE-287 Improper Authentication"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-05-29T15:30:36.688Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T16:29:15.106Z"}}],"cna":{"orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre","dateUpdated":"2022-09-19T21:10:22.000Z"}}},"related_cves":[{"value":"CVE-2022-28321","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22259,"advisory_id":"32df0234-72b4-4dd7-8571-b29f53e2ccae","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-27943","source_published_at":"2022-03-26T00:00:00+00:00","published_at":"2026-10-25T05:58:39.130358+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2022-27943"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-27943","summary":"libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.","evidence":"cve:CVE-2022-27943","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-27943","aliases":["CVE-2022-27943"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T16:29:13.450Z","provider":"cve","references":["https://sourceware.org/bugzilla/show_bug.cgi?id=28995","https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105039","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H424YXGW7OKXS2NCAP35OP6Y4P4AW6VG/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=28995","tags":["x_transferred"]},{"url":"https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105039","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H424YXGW7OKXS2NCAP35OP6Y4P4AW6VG/","name":"FEDORA-2022-c9a1fd5370","tags":["vendor-advisory","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T05:41:10.990Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-27943","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-08T18:52:35.314730Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-674","description":"CWE-674 Uncontrolled Recursion"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T18:57:24.808Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T16:29:13.450Z"}}],"cna":{"orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre","dateUpdated":"2022-11-10T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-27943","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22217,"advisory_id":"8b602572-486a-49cf-ad7e-d294ca51d332","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-26488","source_published_at":"2022-03-07T17:26:04+00:00","published_at":"2026-10-25T05:58:11.277366+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2022-26488"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-26488","summary":"In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker to add user-writable directories to the system search path. To exploit, an administrator must have installed Python for all users and enabled PATH entries. A non-administrative user can trigger a repair that incorrectly adds user-writable paths into PATH, enabling search-path hijacking of other users and system services. This affects Python (CPython) through 3.7.12, 3.8.x through 3.8.12, 3.9.x through 3.9.10, and 3.10.x through 3.10.2.","evidence":"cve:CVE-2022-26488","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-26488","aliases":["CVE-2022-26488"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T16:20:01.019Z","provider":"cve","references":["https://mail.python.org/archives/list/security-announce%40python.org/thread/657Z4XULWZNIY5FRP3OWXHYKUSIH6DMN/","https://security.netapp.com/advisory/ntap-20220419-0005/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://mail.python.org/archives/list/security-announce%40python.org/thread/657Z4XULWZNIY5FRP3OWXHYKUSIH6DMN/","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20220419-0005/","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T05:03:32.791Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2022-26488","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-08T20:58:08.947847Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T21:03:21.625Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T16:20:01.019Z"}}],"cna":{"orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre","dateUpdated":"2022-04-19T18:06:23.000Z"}}},"related_cves":[{"value":"CVE-2022-26488","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22215,"advisory_id":"d6a34db5-aa59-4b61-ad7d-cd345ac97e7e","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-25315","source_published_at":"2022-02-18T04:24:43+00:00","published_at":"2026-10-25T05:58:10.072411+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2022-25315"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-25315","summary":"In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.","evidence":"cve:CVE-2022-25315","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-25315","aliases":["CVE-2022-25315"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T16:19:58.084Z","provider":"cve","references":["https://github.com/libexpat/libexpat/pull/559","https://www.debian.org/security/2022/dsa-5085","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/","https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://security.netapp.com/advisory/ntap-20220303-0008/","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://security.gentoo.org/glsa/202209-24"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://github.com/libexpat/libexpat/pull/559","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2022/02/19/1","name":"[oss-security] 20220219 Expat 2.4.5 released, includes 5 security fixes","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://www.debian.org/security/2022/dsa-5085","name":"DSA-5085","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/","name":"FEDORA-2022-04f206996b","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/","name":"FEDORA-2022-3d9d67f558","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html","name":"[debian-lts-announce] 20220307 [SECURITY] [DLA 2935-1] expat security update","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20220303-0008/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security.gentoo.org/glsa/202209-24","name":"GLSA-202209-24","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T04:36:06.823Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-25315","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-04-23T13:31:38.236594Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-190","description":"CWE-190 Integer Overflow or Wraparound"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-05-05T16:23:24.594Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-484086.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T16:19:58.084Z"}}],"cna":{"orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre","dateUpdated":"2022-09-29T16:07:07.000Z"}}},"related_cves":[{"value":"CVE-2022-25315","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22214,"advisory_id":"045fd270-b9c8-4ecd-8778-104428e30ba3","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-25314","source_published_at":"2022-02-18T04:25:11+00:00","published_at":"2026-10-25T05:58:09.477386+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2022-25314"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-25314","summary":"In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.","evidence":"cve:CVE-2022-25314","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-25314","aliases":["CVE-2022-25314"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T16:15:34.922Z","provider":"cve","references":["https://github.com/libexpat/libexpat/pull/560","https://www.debian.org/security/2022/dsa-5085","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/","https://www.oracle.com/security-alerts/cpuapr2022.html","https://security.netapp.com/advisory/ntap-20220303-0008/","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://security.gentoo.org/glsa/202209-24"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://github.com/libexpat/libexpat/pull/560","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2022/02/19/1","name":"[oss-security] 20220219 Expat 2.4.5 released, includes 5 security fixes","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://www.debian.org/security/2022/dsa-5085","name":"DSA-5085","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/","name":"FEDORA-2022-04f206996b","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/","name":"FEDORA-2022-3d9d67f558","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20220303-0008/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security.gentoo.org/glsa/202209-24","name":"GLSA-202209-24","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T04:36:06.771Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-25314","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-04-23T13:27:16.857275Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-190","description":"CWE-190 Integer Overflow or Wraparound"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-05-05T16:23:34.369Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-484086.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T16:15:34.922Z"}}],"cna":{"orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre","dateUpdated":"2022-09-29T16:07:17.000Z"}}},"related_cves":[{"value":"CVE-2022-25314","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22213,"advisory_id":"20df0bae-6bd6-4083-ac78-4af66e9d4793","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-25236","source_published_at":"2022-02-16T00:39:16+00:00","published_at":"2026-10-25T05:58:08.884962+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2022-25236"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-25236","summary":"xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.","evidence":"cve:CVE-2022-25236","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-25236","aliases":["CVE-2022-25236"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T16:06:42.832Z","provider":"cve","references":["https://github.com/libexpat/libexpat/pull/561","https://www.debian.org/security/2022/dsa-5085","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/","https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://security.netapp.com/advisory/ntap-20220303-0008/","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://security.gentoo.org/glsa/202209-24"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://github.com/libexpat/libexpat/pull/561","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2022/02/19/1","name":"[oss-security] 20220219 Expat 2.4.5 released, includes 5 security fixes","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://www.debian.org/security/2022/dsa-5085","name":"DSA-5085","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/","name":"FEDORA-2022-04f206996b","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/","name":"FEDORA-2022-3d9d67f558","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html","name":"[debian-lts-announce] 20220307 [SECURITY] [DLA 2935-1] expat security update","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20220303-0008/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://packetstormsecurity.com/files/167238/Zoom-XMPP-Stanza-Smuggling-Remote-Code-Execution.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security.gentoo.org/glsa/202209-24","name":"GLSA-202209-24","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T04:36:06.638Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-25236","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-04-23T13:27:40.820309Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-668","description":"CWE-668 Exposure of Resource to Wrong Sphere"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-05-05T16:23:43.998Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-484086.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T16:06:42.832Z"}}],"cna":{"orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre","dateUpdated":"2022-09-29T16:07:15.000Z"}}},"related_cves":[{"value":"CVE-2022-25236","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22212,"advisory_id":"aae01287-2943-48a9-a7fc-27da5e668413","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-25313","source_published_at":"2022-02-18T04:23:04+00:00","published_at":"2026-10-25T05:58:08.269738+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2022-25313"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-25313","summary":"In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.","evidence":"cve:CVE-2022-25313","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-25313","aliases":["CVE-2022-25313"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T16:11:10.646Z","provider":"cve","references":["https://github.com/libexpat/libexpat/pull/558","https://www.debian.org/security/2022/dsa-5085","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/","https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://security.netapp.com/advisory/ntap-20220303-0008/","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://security.gentoo.org/glsa/202209-24"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://github.com/libexpat/libexpat/pull/558","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2022/02/19/1","name":"[oss-security] 20220219 Expat 2.4.5 released, includes 5 security fixes","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://www.debian.org/security/2022/dsa-5085","name":"DSA-5085","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/","name":"FEDORA-2022-04f206996b","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/","name":"FEDORA-2022-3d9d67f558","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html","name":"[debian-lts-announce] 20220307 [SECURITY] [DLA 2935-1] expat security update","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20220303-0008/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security.gentoo.org/glsa/202209-24","name":"GLSA-202209-24","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T04:36:06.700Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-25313","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-05-30T19:41:09.097990Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-674","description":"CWE-674 Uncontrolled Recursion"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-05-30T19:43:21.478Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-484086.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T16:11:10.646Z"}}],"cna":{"orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre","dateUpdated":"2022-09-29T16:07:10.000Z"}}},"related_cves":[{"value":"CVE-2022-25313","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22210,"advisory_id":"e2e9ee5c-4478-4b54-a948-4c7112e0deb7","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2014-9323","source_published_at":"2014-12-16T18:00:00+00:00","published_at":"2026-10-25T05:58:07.063257+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2014-9323"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2014-9323","summary":"The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and crash) via an op_response action with a non-empty status.","evidence":"cve:CVE-2014-9323","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-9323","aliases":["CVE-2014-9323"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T16:24:07.814Z","provider":"cve","references":["https://usn.ubuntu.com/3929-1/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.debian.org/security/2014/dsa-3109","name":"DSA-3109","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.firebirdsql.org/en/news/security-updates-for-v2-1-and-v2-5-series-66011/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:172","name":"MDVSA-2015:172","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://tracker.firebirdsql.org/browse/CORE-4630","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00012.html","name":"openSUSE-SU-2014:1621","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://advisories.mageia.org/MGASA-2014-0523.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://usn.ubuntu.com/3929-1/","name":"USN-3929-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-06T13:40:24.981Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2014-9323","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T16:23:54.787258Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T16:24:07.814Z"}}],"cna":{"orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre","dateUpdated":"2019-04-02T16:06:13.000Z"}}},"related_cves":[{"value":"CVE-2014-9323","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22209,"advisory_id":"c0265a0a-3bdf-4960-97e2-b311655cb066","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2014-0459","source_published_at":"2014-04-16T01:00:00+00:00","published_at":"2026-10-25T05:58:06.465563+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2014-0459"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2014-0459","summary":"Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.","evidence":"cve:CVE-2014-0459","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-0459","aliases":["CVE-2014-0459"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T16:22:56.413Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2014:0413"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.ubuntu.com/usn/USN-2187-1","name":"USN-2187-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0675.html","name":"RHSA-2014:0675","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://security.gentoo.org/glsa/glsa-201406-32.xml","name":"GLSA-201406-32","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://www.ubuntu.com/usn/USN-2191-1","name":"USN-2191-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=140852886808946&w=2","name":"HPSBUX03091","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21672080","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0413","name":"RHSA-2014:0413","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=140852886808946&w=2","name":"SSRT101667","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://www.debian.org/security/2014/dsa-2912","name":"DSA-2912","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/58415","name":"58415","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/66910","name":"66910","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://security.gentoo.org/glsa/glsa-201502-12.xml","name":"GLSA-201502-12","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-06T09:13:10.649Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2014-0459","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T16:22:47.143990Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T16:22:56.413Z"}}],"cna":{"orgId":"43595867-4340-4103-b7a2-9a5208d29a85","shortName":"oracle","dateUpdated":"2018-01-04T19:57:01.000Z"}}},"related_cves":[{"value":"CVE-2014-0459","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22208,"advisory_id":"1a2b1daf-242b-46cb-86ee-e00db758b3fb","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2014-7810","source_published_at":"2015-06-07T23:00:00+00:00","published_at":"2026-10-25T05:58:05.684312+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2014-7810"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2014-7810","summary":"The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.","evidence":"cve:CVE-2014-7810","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-7810","aliases":["CVE-2014-7810"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T16:23:38.148Z","provider":"cve","references":["https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964","https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://rhn.redhat.com/errata/RHSA-2016-0492.html","name":"RHSA-2016:0492","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.ubuntu.com/usn/USN-2654-1","name":"USN-2654-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1622.html","name":"RHSA-2015:1622","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1644018","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.debian.org/security/2016/dsa-3530","name":"DSA-3530","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://tomcat.apache.org/security-7.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1645642","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=145974991225029&w=2","name":"HPSBUX03561","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2046.html","name":"RHSA-2016:2046","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://tomcat.apache.org/security-8.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.debian.org/security/2015/dsa-3428","name":"DSA-3428","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://tomcat.apache.org/security-6.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/74665","name":"74665","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.securitytracker.com/id/1032330","name":"1032330","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.ubuntu.com/usn/USN-2655-1","name":"USN-2655-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1621.html","name":"RHSA-2015:1621","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.debian.org/security/2016/dsa-3447","name":"DSA-3447","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-06T13:03:26.984Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2014-7810","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T16:23:28.778946Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T16:23:38.148Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2020-02-13T16:10:04.000Z"}}},"related_cves":[{"value":"CVE-2014-7810","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22207,"advisory_id":"4d557750-cbfd-4389-9b99-c8630036fca3","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2014-0230","source_published_at":"2015-06-07T23:00:00+00:00","published_at":"2026-10-25T05:58:05.108369+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2014-0230"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2014-0230","summary":"Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.","evidence":"cve:CVE-2014-0230","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-0230","aliases":["CVE-2014-0230"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T16:22:27.058Z","provider":"cve","references":["https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964","https://issues.jboss.org/browse/JWS-220","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013","https://access.redhat.com/errata/RHSA-2015:2659","https://access.redhat.com/errata/RHSA-2015:2660","https://issues.jboss.org/browse/JWS-219","https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.ubuntu.com/usn/USN-2654-1","name":"USN-2654-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1622.html","name":"RHSA-2015:1622","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://issues.jboss.org/browse/JWS-220","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.debian.org/security/2016/dsa-3530","name":"DSA-3530","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0599.html","name":"RHSA-2016:0599","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1603779","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://tomcat.apache.org/security-7.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=145974991225029&w=2","name":"HPSBUX03561","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://openwall.com/lists/oss-security/2015/04/10/1","name":"[oss-security] 20150409 Apache Tomcat partial file upload DoS CVE-2014-0230","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://tomcat.apache.org/security-8.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2661.html","name":"RHSA-2015:2661","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0596.html","name":"RHSA-2016:0596","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://tomcat.apache.org/security-6.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0595.html","name":"RHSA-2016:0595","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2659","name":"RHSA-2015:2659","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://mail-archives.apache.org/mod_mbox/tomcat-announce/201505.mbox/%3C554949D1.8030904%40apache.org%3E","name":"[tomcat-announce] 20150505 [SECURITY] CVE-2014-0230: Apache Tomcat DoS","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=144498216801440&w=2","name":"HPSBOV03503","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0598.html","name":"RHSA-2016:0598","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2660","name":"RHSA-2015:2660","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.ubuntu.com/usn/USN-2655-1","name":"USN-2655-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1621.html","name":"RHSA-2015:1621","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.securityfocus.com/bid/74475","name":"74475","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://issues.jboss.org/browse/JWS-219","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.debian.org/security/2016/dsa-3447","name":"DSA-3447","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1603775","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1603770","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0597.html","name":"RHSA-2016:0597","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-06T09:05:39.368Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2014-0230","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T16:22:17.941767Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T16:22:27.058Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2020-02-13T16:10:12.000Z"}}},"related_cves":[{"value":"CVE-2014-0230","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22206,"advisory_id":"4c10e7e6-9423-4d5e-82b2-2f43cc4797d2","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2014-0227","source_published_at":"2015-02-16T00:00:00+00:00","published_at":"2026-10-25T05:58:04.497678+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2014-0227"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2014-0227","summary":"java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service (resource consumption) by streaming data with malformed chunked transfer coding.","evidence":"cve:CVE-2014-0227","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-0227","aliases":["CVE-2014-0227"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T16:22:03.312Z","provider":"cve","references":["https://bugzilla.redhat.com/show_bug.cgi?id=1109196","https://source.jboss.org/changelog/JBossWeb?cs=2455","https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.ubuntu.com/usn/USN-2654-1","name":"USN-2654-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0765.html","name":"RHSA-2015:0765","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0675.html","name":"RHSA-2015:0675","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:052","name":"MDVSA-2015:052","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=143393515412274&w=2","name":"HPSBUX03341","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0720.html","name":"RHSA-2015:0720","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=143393515412274&w=2","name":"SSRT102068","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://www.securityfocus.com/bid/72717","name":"72717","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0991.html","name":"RHSA-2015:0991","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:084","name":"MDVSA-2015:084","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://www.debian.org/security/2016/dsa-3530","name":"DSA-3530","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.securitytracker.com/id/1032791","name":"1032791","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://tomcat.apache.org/security-7.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0983.html","name":"RHSA-2015:0983","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=143403519711434&w=2","name":"SSRT102066","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:053","name":"MDVSA-2015:053","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150282.html","name":"FEDORA-2015-2109","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://tomcat.apache.org/security-8.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1109196","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://source.jboss.org/changelog/JBossWeb?cs=2455","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2015-02/0067.html","name":"20150209 [SECURITY] CVE-2014-0227 Apache Tomcat Request Smuggling","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://advisories.mageia.org/MGASA-2015-0081.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://tomcat.apache.org/security-6.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.ubuntu.com/usn/USN-2655-1","name":"USN-2655-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1600984","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=143403519711434&w=2","name":"HPSBUX03337","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://www.debian.org/security/2016/dsa-3447","name":"DSA-3447","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-06T09:05:39.451Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2014-0227","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T16:21:53.453584Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T16:22:03.312Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2020-02-13T16:09:57.000Z"}}},"related_cves":[{"value":"CVE-2014-0227","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22205,"advisory_id":"2258da68-0830-4162-bc49-11d5ed21db49","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2014-0119","source_published_at":"2014-05-31T10:00:00+00:00","published_at":"2026-10-25T05:58:03.91509+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2014-0119"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2014-0119","summary":"Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to (1) read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, or (2) read files associated with different web applications on a single Tomcat instance via a crafted web application.","evidence":"cve:CVE-2014-0119","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-0119","aliases":["CVE-2014-0119"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T16:21:34.104Z","provider":"cve","references":["https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013","https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://svn.apache.org/viewvc?view=revision&revision=1590036","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://advisories.mageia.org/MGASA-2014-0268.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1589837","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.ubuntu.com/usn/USN-2654-1","name":"USN-2654-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0765.html","name":"RHSA-2015:0765","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://secunia.com/advisories/59732","name":"59732","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0675.html","name":"RHSA-2015:0675","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21681528","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:052","name":"MDVSA-2015:052","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0720.html","name":"RHSA-2015:0720","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1590028","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1589992","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:084","name":"MDVSA-2015:084","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://www.debian.org/security/2016/dsa-3530","name":"DSA-3530","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1589983","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141017844705317&w=2","name":"HPSBUX03102","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://tomcat.apache.org/security-7.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","name":"20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:053","name":"MDVSA-2015:053","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1588199","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1589997","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://tomcat.apache.org/security-8.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678231","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1589980","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1589640","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://tomcat.apache.org/security-6.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/59873","name":"59873","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2014/May/141","name":"20140527 [SECURITY] CVE-2014-0119 Apache Tomcat information disclosure","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1589985","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1593815","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","name":"20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1589990","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=144498216801440&w=2","name":"HPSBOV03503","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141017844705317&w=2","name":"SSRT101681","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1588193","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/67669","name":"67669","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.securitytracker.com/id/1030298","name":"1030298","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.debian.org/security/2016/dsa-3552","name":"DSA-3552","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1593821","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/60729","name":"60729","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-06T09:05:39.129Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2014-0119","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T16:21:25.085776Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T16:21:34.104Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2020-02-13T16:10:07.000Z"}}},"related_cves":[{"value":"CVE-2014-0119","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22204,"advisory_id":"d5b78c59-8ae7-47d8-959e-04e09880d04f","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2014-0114","source_published_at":"2014-04-30T10:00:00+00:00","published_at":"2026-10-25T05:58:03.322349+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2014-0114"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2014-0114","summary":"Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to \"manipulate\" the ClassLoader and execute arbitrary code via the class parameter, as demonstrated by the passing of this parameter to the getClass method of the ActionForm object in Struts 1.","evidence":"cve:CVE-2014-0114","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-0114","aliases":["CVE-2014-0114"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T16:20:55.413Z","provider":"cve","references":["https://issues.apache.org/jira/browse/BEANUTILS-463","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://security.netapp.com/advisory/ntap-20140911-0001/","https://security.netapp.com/advisory/ntap-20180629-0006/","https://access.redhat.com/solutions/869353","https://bugzilla.redhat.com/show_bug.cgi?id=1091938","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755","https://access.redhat.com/errata/RHSA-2018:2669","https://security.gentoo.org/glsa/201607-09","https://bugzilla.redhat.com/show_bug.cgi?id=1116665","https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E","https://lists.apache.org/thread.html/37e1ed724a1b0e5d191d98c822c426670bdfde83804567131847d2a3%40%3Cdevnull.infra.apache.org%3E","https://lists.apache.org/thread.html/c70da3cb6e3f03e0ad8013e38b6959419d866c4a7c80fdd34b73f25c%40%3Ccommits.pulsar.apache.org%3E","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://lists.apache.org/thread.html/97fc033dad4233a5d82fcb75521eabdd23dd99ef32eb96f407f96a1a%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/8e2bdfabd5b14836aa3cf900aa0a62ff9f4e22a518bb4e553ebcf55f%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/65b39fa6d700e511927e5668a4038127432178a210aff81500eb36e5%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/080af531a9113e29d3f6a060e3f992dc9f40315ec7234e15c3b339e3%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/ffde3f266d3bde190b54c9202169e7918a92de7e7e0337d792dc7263%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/40fc236a35801a535cd49cf1979dbeab034b833c63a284941bce5bf1%40%3Cdev.commons.apache.org%3E","https://lists.apache.org/thread.html/15fcdf27fa060de276edc0b4098526afc21c236852eb3de9be9594f3%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/4c3fd707a049bfe0577dba8fc9c4868ffcdabe68ad86586a0a49242e%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/0340493a1ddf3660dee09a5c503449cdac5bec48cdc478de65858859%40%3Cdev.commons.apache.org%3E","https://lists.apache.org/thread.html/2ba22f2e3de945039db735cf6cbf7f8be901ab2537337c7b1dd6a0f0%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/31f9dc2c9cb68e390634a4202f84b8569f64b6569bfcce46348fd9fd%40%3Ccommits.commons.apache.org%3E","https://lists.apache.org/thread.html/098e9aae118ac5c06998a9ba4544ab2475162981d290fdef88e6f883%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/fda473f46e51019a78ab217a7a3a3d48dafd90846e75bd5536ef72f3%40%3Cnotifications.commons.apache.org%3E","https://lists.apache.org/thread.html/c24c0b931632a397142882ba248b7bd440027960f22845c6f664c639%40%3Ccommits.commons.apache.org%3E","https://lists.apache.org/thread.html/42ad6326d62ea8453d0d0ce12eff39bbb7c5b4fca9639da007291346%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/ebc4f019798f6ce2a39f3e0c26a9068563a9ba092cdf3ece398d4e2f%40%3Cnotifications.commons.apache.org%3E","https://lists.apache.org/thread.html/df093c662b5e49fe9e38ef91f78ffab09d0839dea7df69a747dffa86%40%3Cdev.commons.apache.org%3E","https://lists.apache.org/thread.html/9b5505632f5683ee17bda4f7878525e672226c7807d57709283ffa64%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/cee6b1c4533be1a753614f6a7d7c533c42091e7cafd7053b8f62792a%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/df1c385f2112edffeff57a6b21d12e8d24031a9f578cb8ba22a947a8%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/2454e058fd05ba30ca29442fdeb7ea47505d47a888fbc9f3a53f31d0%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/869c08899f34c1a70c9fb42f92ac0d043c98781317e0c19d7ba3f5e3%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/084ae814e69178d2ce174cfdf149bc6e46d7524f3308c08d3adb43cb%40%3Cissues.commons.apache.org%3E","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://lists.apache.org/thread.html/f3682772e62926b5c009eed63c62767021be6da0bb7427610751809f%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/aa4ca069c7aea5b1d7329bc21576c44a39bcc4eb7bb2760c4b16f2f6%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/88c497eead24ed517a2bb3159d3dc48725c215e97fe7a98b2cf3ea25%40%3Cdev.commons.apache.org%3E","https://lists.apache.org/thread.html/0a35108a56e2d575e3b3985588794e39fbf264097aba66f4c5569e4f%40%3Cuser.commons.apache.org%3E","https://lists.apache.org/thread.html/918ec15a80fc766ff46c5d769cb8efc88fed6674faadd61a7105166b%40%3Cannounce.apache.org%3E","https://lists.apache.org/thread.html/c7e31c3c90b292e0bafccc4e1b19c9afc1503a65d82cb7833dfd7478%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/d27c51b3c933f885460aa6d3004eb228916615caaaddbb8e8bfeeb40%40%3Cgitbox.activemq.apache.org%3E","https://lists.apache.org/thread.html/3f500972dceb48e3cb351f58565aecf6728b1ea7a69593af86c30b30%40%3Cissues.activemq.apache.org%3E","https://lists.apache.org/thread.html/1565e8b786dff4cb3b48ecc8381222c462c92076c9e41408158797b5%40%3Ccommits.commons.apache.org%3E","https://lists.apache.org/thread.html/956995acee0d8bc046f1df0a55b7fbeb65dd2f82864e5de1078bacb0%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/1f78f1e32cc5614ec0c5b822ba4bd7fc8e8b5c46c8e038b6bd609cb5%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/0efed939139f5b9dcd62b8acf7cb8a9789227d14abdc0c6f141c4a4c%40%3Cissues.activemq.apache.org%3E","https://lists.apache.org/thread.html/09981ae3df188a2ad1ce20f62ef76a5b2d27cf6b9ebab366cf1d6cc6%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/6b30629b32d020c40d537f00b004d281c37528d471de15ca8aec2cd4%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/6afe2f935493e69a332b9c5a4f23cafe95c15ede1591a492cf612293%40%3Cissues.commons.apache.org%3E","https://access.redhat.com/errata/RHSA-2019:2995","https://lists.apache.org/thread.html/66176fa3caeca77058d9f5b0316419a43b4c3fa2b572e05b87132226%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/r75d67108e557bb5d4c4318435067714a0180de525314b7e8dab9d04e%40%3Cissues.activemq.apache.org%3E","https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E","https://lists.apache.org/thread.html/rf5230a049d989dbfdd404b4320a265dceeeba459a4d04ec21873bd55%40%3Csolr-user.lucene.apache.org%3E","https://lists.apache.org/thread.html/r458d61eaeadecaad04382ebe583230bc027f48d9e85e4731bc573477%40%3Ccommits.dolphinscheduler.apache.org%3E"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://apache-ignite-developers.2346864.n4.nabble.com/CVE-2014-0114-Apache-Ignite-is-vulnerable-to-existing-CVE-2014-0114-td31205.html","name":"[apache-ignite-developers] 20180601  [CVE-2014-0114]: Apache Ignite is vulnerable to existing CVE-2014-0114","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://secunia.com/advisories/57477","name":"57477","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0008.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://issues.apache.org/jira/browse/BEANUTILS-463","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/58710","name":"58710","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:095","name":"MDVSA-2014:095","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21675689","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136958.html","name":"FEDORA-2014-9380","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21674812","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20140911-0001/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/59464","name":"59464","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/59118","name":"59118","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20180629-0006/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21675387","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://access.redhat.com/solutions/869353","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1091938","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://advisories.mageia.org/MGASA-2014-0219.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/60703","name":"60703","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21675972","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676375","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://openwall.com/lists/oss-security/2014/07/08/1","name":"[oss-security] 20140707 Re: CVE request for commons-beanutils: 'class' property is exposed, potentially leading to RCE","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2669","name":"RHSA-2018:2669","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://security.gentoo.org/glsa/201607-09","name":"GLSA-201607-09","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141451023707502&w=2","name":"HPSBST03160","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","name":"20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21675898","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676110","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27042296","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676303","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/59228","name":"59228","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/59246","name":"59246","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1116665","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://openwall.com/lists/oss-security/2014/06/15/10","name":"[oss-security] 20140616 CVE request for commons-beanutils: 'class' property is exposed, potentially leading to RCE","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://secunia.com/advisories/59245","name":"59245","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=140801096002766&w=2","name":"HPSBMU03090","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21674128","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676931","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/60177","name":"60177","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","name":"20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21675496","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.debian.org/security/2014/dsa-2940","name":"DSA-2940","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21675266","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/59014","name":"59014","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677110","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676091","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/67121","name":"67121","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/advisories/59480","name":"59480","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=140119284401582&w=2","name":"HPSBGN03041","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://secunia.com/advisories/59479","name":"59479","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/59704","name":"59704","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/58947","name":"58947","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/59718","name":"59718","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/59430","name":"59430","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/58851","name":"58851","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E","name":"[lucene-solr-user] 20190104 Re: SOLR v7 Security Issues Caused Denial of Use - Sonatype Application Composition Report","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/37e1ed724a1b0e5d191d98c822c426670bdfde83804567131847d2a3%40%3Cdevnull.infra.apache.org%3E","name":"[infra-devnull] 20190329 [GitHub] [pulsar] massakam opened pull request #3938: Upgrade third party libraries with security vulnerabilities","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/c70da3cb6e3f03e0ad8013e38b6959419d866c4a7c80fdd34b73f25c%40%3Ccommits.pulsar.apache.org%3E","name":"[pulsar-commits] 20190329 [GitHub] [pulsar] massakam opened a new pull request #3938: Upgrade third party libraries with security vulnerabilities","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://lists.apache.org/thread.html/97fc033dad4233a5d82fcb75521eabdd23dd99ef32eb96f407f96a1a%40%3Cissues.commons.apache.org%3E","name":"[commons-issues] 20190521 [jira] [Created] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/8e2bdfabd5b14836aa3cf900aa0a62ff9f4e22a518bb4e553ebcf55f%40%3Cissues.commons.apache.org%3E","name":"[commons-issues] 20190522 [jira] [Commented] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/65b39fa6d700e511927e5668a4038127432178a210aff81500eb36e5%40%3Cissues.commons.apache.org%3E","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://lists.apache.org/thread.html/080af531a9113e29d3f6a060e3f992dc9f40315ec7234e15c3b339e3%40%3Cissues.commons.apache.org%3E","name":"[commons-issues] 20190522 [jira] [Work logged] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/ffde3f266d3bde190b54c9202169e7918a92de7e7e0337d792dc7263%40%3Cissues.commons.apache.org%3E","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://lists.apache.org/thread.html/40fc236a35801a535cd49cf1979dbeab034b833c63a284941bce5bf1%40%3Cdev.commons.apache.org%3E","name":"[commons-dev] 20190522 [beanutils2] CVE-2014-0114 Pull Request","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/15fcdf27fa060de276edc0b4098526afc21c236852eb3de9be9594f3%40%3Cissues.commons.apache.org%3E","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://lists.apache.org/thread.html/4c3fd707a049bfe0577dba8fc9c4868ffcdabe68ad86586a0a49242e%40%3Cissues.commons.apache.org%3E","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://lists.apache.org/thread.html/0340493a1ddf3660dee09a5c503449cdac5bec48cdc478de65858859%40%3Cdev.commons.apache.org%3E","name":"[commons-dev] 20190525 Re: [beanutils2] CVE-2014-0114 Pull Request","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/2ba22f2e3de945039db735cf6cbf7f8be901ab2537337c7b1dd6a0f0%40%3Cissues.commons.apache.org%3E","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://lists.apache.org/thread.html/31f9dc2c9cb68e390634a4202f84b8569f64b6569bfcce46348fd9fd%40%3Ccommits.commons.apache.org%3E","name":"[commons-commits] 20190528 [commons-beanutils] branch master updated: BEANUTILS-520: Mitigate CVE-2014-0114 by enabling SuppressPropertiesBeanIntrospector.SUPPRESS_CLASS by default. (#7)","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/098e9aae118ac5c06998a9ba4544ab2475162981d290fdef88e6f883%40%3Cissues.commons.apache.org%3E","name":"[commons-issues] 20190528 [jira] [Closed] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/fda473f46e51019a78ab217a7a3a3d48dafd90846e75bd5536ef72f3%40%3Cnotifications.commons.apache.org%3E","name":"[commons-notifications] 20190528 Build failed in Jenkins: commons-beanutils #74","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/c24c0b931632a397142882ba248b7bd440027960f22845c6f664c639%40%3Ccommits.commons.apache.org%3E","name":"[commons-commits] 20190528 [commons-beanutils] branch master updated: [BEANUTILS-520] BeanUtils2 mitigate CVE-2014-0114.","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/42ad6326d62ea8453d0d0ce12eff39bbb7c5b4fca9639da007291346%40%3Cissues.commons.apache.org%3E","name":"[commons-issues] 20190528 [jira] [Work logged] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/ebc4f019798f6ce2a39f3e0c26a9068563a9ba092cdf3ece398d4e2f%40%3Cnotifications.commons.apache.org%3E","name":"[commons-notifications] 20190528 Build failed in Jenkins: commons-beanutils #75","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/df093c662b5e49fe9e38ef91f78ffab09d0839dea7df69a747dffa86%40%3Cdev.commons.apache.org%3E","name":"[commons-dev] 20190605 Re: [beanutils] Towards 1.10","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/9b5505632f5683ee17bda4f7878525e672226c7807d57709283ffa64%40%3Cissues.commons.apache.org%3E","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://lists.apache.org/thread.html/cee6b1c4533be1a753614f6a7d7c533c42091e7cafd7053b8f62792a%40%3Cissues.commons.apache.org%3E","name":"[commons-issues] 20190615 [jira] [Updated] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/df1c385f2112edffeff57a6b21d12e8d24031a9f578cb8ba22a947a8%40%3Cissues.commons.apache.org%3E","name":"[commons-issues] 20190615 [jira] [Reopened] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/2454e058fd05ba30ca29442fdeb7ea47505d47a888fbc9f3a53f31d0%40%3Cissues.commons.apache.org%3E","name":"[commons-issues] 20190615 [jira] [Resolved] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/869c08899f34c1a70c9fb42f92ac0d043c98781317e0c19d7ba3f5e3%40%3Cissues.commons.apache.org%3E","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://lists.apache.org/thread.html/084ae814e69178d2ce174cfdf149bc6e46d7524f3308c08d3adb43cb%40%3Cissues.commons.apache.org%3E","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://lists.apache.org/thread.html/f3682772e62926b5c009eed63c62767021be6da0bb7427610751809f%40%3Cissues.commons.apache.org%3E","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://lists.apache.org/thread.html/aa4ca069c7aea5b1d7329bc21576c44a39bcc4eb7bb2760c4b16f2f6%40%3Cissues.commons.apache.org%3E","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://lists.apache.org/thread.html/88c497eead24ed517a2bb3159d3dc48725c215e97fe7a98b2cf3ea25%40%3Cdev.commons.apache.org%3E","name":"[commons-dev] 20190814 [SECURITY] CVE-2019-10086. Apache Commons Beanutils does not suppresses the class property in PropertyUtilsBean by default.","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/0a35108a56e2d575e3b3985588794e39fbf264097aba66f4c5569e4f%40%3Cuser.commons.apache.org%3E","name":"[commons-user] 20190814 [SECURITY] CVE-2019-10086. Apache Commons Beanutils does not suppresses the class property in PropertyUtilsBean by default.","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/918ec15a80fc766ff46c5d769cb8efc88fed6674faadd61a7105166b%40%3Cannounce.apache.org%3E","name":"[announce] 20190814 [SECURITY] CVE-2019-10086. Apache Commons Beanutils does not suppresses the class property in PropertyUtilsBean by default.","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/c7e31c3c90b292e0bafccc4e1b19c9afc1503a65d82cb7833dfd7478%40%3Cissues.commons.apache.org%3E","name":"[commons-issues] 20190818 [jira] [Commented] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/d27c51b3c933f885460aa6d3004eb228916615caaaddbb8e8bfeeb40%40%3Cgitbox.activemq.apache.org%3E","name":"[activemq-gitbox] 20190903 [GitHub] [activemq-artemis] jeloba opened a new pull request #2820: Updated Apache BeanUtils to address CVE","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/3f500972dceb48e3cb351f58565aecf6728b1ea7a69593af86c30b30%40%3Cissues.activemq.apache.org%3E","name":"[activemq-issues] 20190904 [jira] [Created] (ARTEMIS-2470) Update Apache BeanUtils to Address CVE-2014-0114","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/1565e8b786dff4cb3b48ecc8381222c462c92076c9e41408158797b5%40%3Ccommits.commons.apache.org%3E","name":"[commons-commits] 20190906 [commons-configuration] branch master updated: [CONFIGURATION-755][CVE-2014-0114] Update Apache Commons BeanUtils from 1.9.3 to 1.9.4.","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/956995acee0d8bc046f1df0a55b7fbeb65dd2f82864e5de1078bacb0%40%3Cissues.commons.apache.org%3E","name":"[commons-issues] 20190906 [jira] [Updated] (CONFIGURATION-755) [CVE-2014-0114] Update Apache Commons BeanUtils from 1.9.3 to 1.9.4.","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/1f78f1e32cc5614ec0c5b822ba4bd7fc8e8b5c46c8e038b6bd609cb5%40%3Cissues.commons.apache.org%3E","name":"[commons-issues] 20190906 [jira] [Closed] (CONFIGURATION-755) [CVE-2014-0114] Update Apache Commons BeanUtils from 1.9.3 to 1.9.4.","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/0efed939139f5b9dcd62b8acf7cb8a9789227d14abdc0c6f141c4a4c%40%3Cissues.activemq.apache.org%3E","name":"[activemq-issues] 20190909 [jira] [Work logged] (ARTEMIS-2470) Update Apache BeanUtils to Address CVE-2014-0114","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/09981ae3df188a2ad1ce20f62ef76a5b2d27cf6b9ebab366cf1d6cc6%40%3Cissues.commons.apache.org%3E","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://lists.apache.org/thread.html/6b30629b32d020c40d537f00b004d281c37528d471de15ca8aec2cd4%40%3Cissues.commons.apache.org%3E","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://lists.apache.org/thread.html/6afe2f935493e69a332b9c5a4f23cafe95c15ede1591a492cf612293%40%3Cissues.commons.apache.org%3E","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2995","name":"RHSA-2019:2995","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.apache.org/thread.html/66176fa3caeca77058d9f5b0316419a43b4c3fa2b572e05b87132226%40%3Cissues.commons.apache.org%3E","name":"[commons-issues] 20191014 [jira] [Updated] (BEANUTILS-520) Mitigate CVE-2014-0114","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E","name":"[drill-dev] 20191017 Dependencies used by Drill contain known vulnerabilities","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E","name":"[drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E","name":"[drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E","name":"[druid-commits] 20191115 [GitHub] [incubator-druid] ccaominh opened a new pull request #8878: Address security vulnerabilities","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r75d67108e557bb5d4c4318435067714a0180de525314b7e8dab9d04e%40%3Cissues.activemq.apache.org%3E","name":"[activemq-issues] 20200109 [jira] [Resolved] (ARTEMIS-2470) Update Apache BeanUtils to Address CVE-2014-0114","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E","name":"[lucene-solr-user] 20200320 CVEs (vulnerabilities) that apply to Solr 8.4.1","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/rf5230a049d989dbfdd404b4320a265dceeeba459a4d04ec21873bd55%40%3Csolr-user.lucene.apache.org%3E","name":"[lucene-solr-user] 20200320 Re: CVEs (vulnerabilities) that apply to Solr 8.4.1","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r458d61eaeadecaad04382ebe583230bc027f48d9e85e4731bc573477%40%3Ccommits.dolphinscheduler.apache.org%3E","name":"[dolphinscheduler-commits] 20210121 [GitHub] [incubator-dolphinscheduler] c-f-cooper commented on issue #4506: There is a vulnerability in beanutils 1.7.0,upgrade recommended","tags":["mailing-list","x_refsource_MLIST","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-06T09:05:38.989Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2014-0114","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-14T16:20:46.164537Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T16:20:55.413Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2021-01-21T14:06:10.000Z"}}},"related_cves":[{"value":"CVE-2014-0114","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22203,"advisory_id":"247cc086-6454-4be6-8898-13f56539b26c","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2014-0099","source_published_at":"2014-05-31T10:00:00+00:00","published_at":"2026-10-25T05:58:02.712497+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2014-0099"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2014-0099","summary":"Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse proxy, allows remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.","evidence":"cve:CVE-2014-0099","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-0099","aliases":["CVE-2014-0099"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T16:20:13.567Z","provider":"cve","references":["https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013","https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://advisories.mageia.org/MGASA-2014-0268.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/59121","name":"59121","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0765.html","name":"RHSA-2015:0765","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://secunia.com/advisories/59732","name":"59732","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/59835","name":"59835","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/532221/100/0/threaded","name":"20140527 Re: [SECURITY] CVE-2014-0099 Apache Tomcat information disclosure","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0675.html","name":"RHSA-2015:0675","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21681528","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:052","name":"MDVSA-2015:052","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0720.html","name":"RHSA-2015:0720","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2014/May/140","name":"20140527 [SECURITY]  Re: [SECURITY] CVE-2014-0099 Apache Tomcat information disclosure","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://secunia.com/advisories/59849","name":"59849","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://linux.oracle.com/errata/ELSA-2014-0865.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/67668","name":"67668","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:084","name":"MDVSA-2015:084","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://www.debian.org/security/2016/dsa-3530","name":"DSA-3530","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://secunia.com/advisories/59678","name":"59678","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141017844705317&w=2","name":"HPSBUX03102","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/532218/100/0/threaded","name":"20140527 [SECURITY] CVE-2014-0097 Apache Tomcat information disclosure","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://tomcat.apache.org/security-7.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","name":"20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:053","name":"MDVSA-2015:053","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141390017113542&w=2","name":"HPSBUX03150","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150282.html","name":"FEDORA-2015-2109","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://tomcat.apache.org/security-8.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678231","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://tomcat.apache.org/security-6.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/59873","name":"59873","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1578814","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","name":"20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://www.securitytracker.com/id/1030302","name":"1030302","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=144498216801440&w=2","name":"HPSBOV03503","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141017844705317&w=2","name":"SSRT101681","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1578812","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1580473","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.debian.org/security/2016/dsa-3447","name":"DSA-3447","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://secunia.com/advisories/60729","name":"60729","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/60793","name":"60793","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2014/May/138","name":"20140527 [SECURITY] CVE-2014-0097 Apache Tomcat information disclosure","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21680603","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-06T09:05:38.296Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2014-0099","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T16:19:59.454592Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T16:20:13.567Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2020-02-13T16:09:53.000Z"}}},"related_cves":[{"value":"CVE-2014-0099","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22202,"advisory_id":"b572a785-4403-4810-8ba4-8e40da44f053","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2014-0075","source_published_at":"2014-05-31T10:00:00+00:00","published_at":"2026-10-25T05:58:01.84264+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2014-0075"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2014-0075","summary":"Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumption) via a malformed chunk size in chunked transfer coding of a request during the streaming of data.","evidence":"cve:CVE-2014-0075","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-0075","aliases":["CVE-2014-0075"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T16:18:56.965Z","provider":"cve","references":["https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013","https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://svn.apache.org/viewvc?view=revision&revision=1578337","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://advisories.mageia.org/MGASA-2014-0268.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.novell.com/support/kb/doc.php?id=7010166","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/59121","name":"59121","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0765.html","name":"RHSA-2015:0765","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://secunia.com/advisories/59732","name":"59732","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/59835","name":"59835","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0675.html","name":"RHSA-2015:0675","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21681528","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:052","name":"MDVSA-2015:052","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0720.html","name":"RHSA-2015:0720","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://secunia.com/advisories/59849","name":"59849","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://linux.oracle.com/errata/ELSA-2014-0865.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:084","name":"MDVSA-2015:084","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://www.debian.org/security/2016/dsa-3530","name":"DSA-3530","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://secunia.com/advisories/59678","name":"59678","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1578341","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141017844705317&w=2","name":"HPSBUX03102","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://tomcat.apache.org/security-7.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","name":"20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1579262","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:053","name":"MDVSA-2015:053","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141390017113542&w=2","name":"HPSBUX03150","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150282.html","name":"FEDORA-2015-2109","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/67671","name":"67671","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://tomcat.apache.org/security-8.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678231","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/59616","name":"59616","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://tomcat.apache.org/security-6.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/59873","name":"59873","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","name":"20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=144498216801440&w=2","name":"HPSBOV03503","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141017844705317&w=2","name":"SSRT101681","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.debian.org/security/2016/dsa-3447","name":"DSA-3447","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://secunia.com/advisories/60729","name":"60729","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/60793","name":"60793","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21680603","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-06T09:05:38.500Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2014-0075","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T16:18:44.211037Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T16:18:56.965Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2020-02-13T16:10:10.000Z"}}},"related_cves":[{"value":"CVE-2014-0075","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22201,"advisory_id":"a490f235-daf6-43ee-9483-0cd8aa23163e","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2014-0096","source_published_at":"2014-05-31T10:00:00+00:00","published_at":"2026-10-25T05:58:01.02399+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2014-0096"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2014-0096","summary":"java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly restrict XSLT stylesheets, which allows remote attackers to bypass security-manager restrictions and read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.","evidence":"cve:CVE-2014-0096","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-0096","aliases":["CVE-2014-0096"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T16:19:26.787Z","provider":"cve","references":["https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013","https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://advisories.mageia.org/MGASA-2014-0268.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.novell.com/support/kb/doc.php?id=7010166","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/67667","name":"67667","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/advisories/59121","name":"59121","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0765.html","name":"RHSA-2015:0765","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://secunia.com/advisories/59732","name":"59732","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/59835","name":"59835","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0675.html","name":"RHSA-2015:0675","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21681528","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:052","name":"MDVSA-2015:052","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0720.html","name":"RHSA-2015:0720","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://secunia.com/advisories/59849","name":"59849","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://linux.oracle.com/errata/ELSA-2014-0865.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1578637","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:084","name":"MDVSA-2015:084","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://www.securitytracker.com/id/1030301","name":"1030301","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.debian.org/security/2016/dsa-3530","name":"DSA-3530","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://secunia.com/advisories/59678","name":"59678","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141017844705317&w=2","name":"HPSBUX03102","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://tomcat.apache.org/security-7.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","name":"20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:053","name":"MDVSA-2015:053","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150282.html","name":"FEDORA-2015-2109","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://tomcat.apache.org/security-8.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678231","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1585853","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/59616","name":"59616","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2014/May/135","name":"20140527 [SECURITY] CVE-2014-0096 Apache Tomcat information disclosure","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://tomcat.apache.org/security-6.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1578655","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/59873","name":"59873","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","name":"20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=144498216801440&w=2","name":"HPSBOV03503","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://marc.info/?l=bugtraq&m=141017844705317&w=2","name":"SSRT101681","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1578610","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1578611","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.debian.org/security/2016/dsa-3552","name":"DSA-3552","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://secunia.com/advisories/60729","name":"60729","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E","name":"[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-06T09:05:38.741Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2014-0096","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T16:19:16.399065Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T16:19:26.787Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2020-02-13T16:09:49.000Z"}}},"related_cves":[{"value":"CVE-2014-0096","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22143,"advisory_id":"11fbda9a-874f-40cf-911f-e3fafe379c8b","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-25235","source_published_at":"2022-02-16T00:40:20+00:00","published_at":"2026-10-25T05:57:22.064498+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2022-25235"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-25235","summary":"xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.","evidence":"cve:CVE-2022-25235","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-25235","aliases":["CVE-2022-25235"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T16:01:51.418Z","provider":"cve","references":["https://github.com/libexpat/libexpat/pull/562","https://www.debian.org/security/2022/dsa-5085","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/","https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://security.netapp.com/advisory/ntap-20220303-0008/","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://security.gentoo.org/glsa/202209-24"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://github.com/libexpat/libexpat/pull/562","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2022/02/19/1","name":"[oss-security] 20220219 Expat 2.4.5 released, includes 5 security fixes","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://www.debian.org/security/2022/dsa-5085","name":"DSA-5085","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/","name":"FEDORA-2022-04f206996b","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/","name":"FEDORA-2022-3d9d67f558","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html","name":"[debian-lts-announce] 20220307 [SECURITY] [DLA 2935-1] expat security update","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20220303-0008/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security.gentoo.org/glsa/202209-24","name":"GLSA-202209-24","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T04:36:06.591Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-25235","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-04-23T13:27:39.230735Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-116","description":"CWE-116 Improper Encoding or Escaping of Output"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-05-05T16:23:52.716Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-484086.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T16:01:51.418Z"}}],"cna":{"orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre","dateUpdated":"2022-09-29T16:07:09.000Z"}}},"related_cves":[{"value":"CVE-2022-25235","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22139,"advisory_id":"c7f19e26-63fd-44f9-b09c-625c1f02e7b1","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-24407","source_published_at":"2022-02-23T00:00:00+00:00","published_at":"2026-10-25T05:56:44.389971+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2022-24407"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-24407","summary":"In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.","evidence":"cve:CVE-2022-24407","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-24407","aliases":["CVE-2022-24407"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T15:57:16.753Z","provider":"cve","references":["https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28","https://www.debian.org/security/2022/dsa-5087","https://lists.debian.org/debian-lts-announce/2022/03/msg00002.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZC6BMPI3V3MC2IGNLN377ETUWO7QBIH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H26R4SMGM3WHXX4XYNNJB4YGFIL5UNF4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4FIXU75Q6RBNK6UYM7MQ3TCFGXR7AX4U/","https://www.oracle.com/security-alerts/cpujul2022.html","https://github.com/cyrusimap/cyrus-sasl/blob/fdcd13ceaef8de684dc69008011fa865c5b4a3ac/docsrc/sasl/release-notes/2.1/index.rst","https://security.netapp.com/advisory/ntap-20221007-0003/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2022/02/23/4","name":"[oss-security] 20220223 Fwd: Cyrus-SASL 2.1.28 released [fixes CVE-2022-24407 & CVE-2019-19906]","tags":["mailing-list","x_transferred"]},{"url":"https://www.debian.org/security/2022/dsa-5087","name":"DSA-5087","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/03/msg00002.html","name":"[debian-lts-announce] 20220306 [SECURITY] [DLA 2931-1] cyrus-sasl2 security update","tags":["mailing-list","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZC6BMPI3V3MC2IGNLN377ETUWO7QBIH/","name":"FEDORA-2022-f9642fab70","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H26R4SMGM3WHXX4XYNNJB4YGFIL5UNF4/","name":"FEDORA-2022-8cc64f73d0","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4FIXU75Q6RBNK6UYM7MQ3TCFGXR7AX4U/","name":"FEDORA-2022-e33e824d37","tags":["vendor-advisory","x_transferred"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","tags":["x_transferred"]},{"url":"https://github.com/cyrusimap/cyrus-sasl/blob/fdcd13ceaef8de684dc69008011fa865c5b4a3ac/docsrc/sasl/release-notes/2.1/index.rst","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20221007-0003/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T04:13:55.263Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T15:57:16.753Z"}}],"cna":{"orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre","dateUpdated":"2022-10-07T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-24407","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22138,"advisory_id":"23492cc5-20cf-4260-8b04-12353d907e34","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-23990","source_published_at":"2022-01-26T18:02:02+00:00","published_at":"2026-10-25T05:56:43.683186+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2022-23990"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-23990","summary":"Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.","evidence":"cve:CVE-2022-23990","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-23990","aliases":["CVE-2022-23990"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T15:57:15.168Z","provider":"cve","references":["https://github.com/libexpat/libexpat/pull/551","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7FF2UH7MPXKTADYSJUAHI2Y5UHBSHUH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/34NXVL2RZC2YZRV74ZQ3RNFB7WCEUP7D/","https://www.debian.org/security/2022/dsa-5073","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.tenable.com/security/tns-2022-05","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://security.gentoo.org/glsa/202209-24"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://github.com/libexpat/libexpat/pull/551","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7FF2UH7MPXKTADYSJUAHI2Y5UHBSHUH/","name":"FEDORA-2022-d2abd0858e","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/34NXVL2RZC2YZRV74ZQ3RNFB7WCEUP7D/","name":"FEDORA-2022-88f6a3d290","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://www.debian.org/security/2022/dsa-5073","name":"DSA-5073","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.tenable.com/security/tns-2022-05","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security.gentoo.org/glsa/202209-24","name":"GLSA-202209-24","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T03:59:23.260Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-23990","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-04-23T13:27:20.689397Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-190","description":"CWE-190 Integer Overflow or Wraparound"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-05-05T16:24:50.854Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-484086.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T15:57:15.168Z"}}],"cna":{"orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre","dateUpdated":"2022-09-29T16:07:02.000Z"}}},"related_cves":[{"value":"CVE-2022-23990","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22118,"advisory_id":"97a170b2-09a5-44b7-b0dc-06c44222fd9a","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-23852","source_published_at":"2022-01-24T01:06:50+00:00","published_at":"2026-10-25T05:56:25.806891+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2022-23852"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-23852","summary":"Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.","evidence":"cve:CVE-2022-23852","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-23852","aliases":["CVE-2022-23852"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T15:52:50.075Z","provider":"cve","references":["https://github.com/libexpat/libexpat/pull/550","https://www.debian.org/security/2022/dsa-5073","https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.tenable.com/security/tns-2022-05","https://security.netapp.com/advisory/ntap-20220217-0001/","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://security.gentoo.org/glsa/202209-24"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://github.com/libexpat/libexpat/pull/550","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.debian.org/security/2022/dsa-5073","name":"DSA-5073","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html","name":"[debian-lts-announce] 20220307 [SECURITY] [DLA 2935-1] expat security update","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.tenable.com/security/tns-2022-05","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20220217-0001/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security.gentoo.org/glsa/202209-24","name":"GLSA-202209-24","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T03:51:46.082Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-23852","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-04-23T13:27:42.655253Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-190","description":"CWE-190 Integer Overflow or Wraparound"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-05-05T16:25:00.235Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-484086.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T15:52:50.075Z"}}],"cna":{"orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre","dateUpdated":"2022-09-29T16:07:06.000Z"}}},"related_cves":[{"value":"CVE-2022-23852","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22107,"advisory_id":"deb910ad-c0ad-4dd9-9a49-e4cf60e47262","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-23308","source_published_at":"2022-02-26T00:00:00+00:00","published_at":"2026-10-25T05:56:18.823693+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2022-23308"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-23308","summary":"valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.","evidence":"cve:CVE-2022-23308","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-23308","aliases":["CVE-2022-23308"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T15:48:24.582Z","provider":"cve","references":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LA3MWWAYZADWJ5F6JOUBX65UZAMQB7RF/","https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://support.apple.com/kb/HT213257","https://support.apple.com/kb/HT213256","https://support.apple.com/kb/HT213255","https://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.9.13/NEWS","https://github.com/GNOME/libxml2/commit/652dd12a858989b14eed4e84e453059cd3ba340e","https://security.netapp.com/advisory/ntap-20220331-0008/","https://support.apple.com/kb/HT213253","https://support.apple.com/kb/HT213258","https://support.apple.com/kb/HT213254","https://security.gentoo.org/glsa/202210-03"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LA3MWWAYZADWJ5F6JOUBX65UZAMQB7RF/","name":"FEDORA-2022-050c712ed7","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html","name":"[debian-lts-announce] 20220408 [SECURITY] [DLA 2972-1] libxml2 security update","tags":["mailing-list","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2022/May/33","name":"20220516 APPLE-SA-2022-05-16-4 Security Update 2022-004 Catalina","tags":["mailing-list","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2022/May/37","name":"20220516 APPLE-SA-2022-05-16-6 tvOS 15.5","tags":["mailing-list","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2022/May/35","name":"20220516 APPLE-SA-2022-05-16-3 macOS Big Sur 11.6.6","tags":["mailing-list","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2022/May/38","name":"20220516 APPLE-SA-2022-05-16-2 macOS Monterey 12.4","tags":["mailing-list","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2022/May/36","name":"20220516 APPLE-SA-2022-05-16-5 watchOS 8.6","tags":["mailing-list","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2022/May/34","name":"20220516 APPLE-SA-2022-05-16-1 iOS 15.5 and iPadOS 15.5","tags":["mailing-list","x_transferred"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","tags":["x_transferred"]},{"url":"https://support.apple.com/kb/HT213257","tags":["x_transferred"]},{"url":"https://support.apple.com/kb/HT213256","tags":["x_transferred"]},{"url":"https://support.apple.com/kb/HT213255","tags":["x_transferred"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.9.13/NEWS","tags":["x_transferred"]},{"url":"https://github.com/GNOME/libxml2/commit/652dd12a858989b14eed4e84e453059cd3ba340e","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20220331-0008/","tags":["x_transferred"]},{"url":"https://support.apple.com/kb/HT213253","tags":["x_transferred"]},{"url":"https://support.apple.com/kb/HT213258","tags":["x_transferred"]},{"url":"https://support.apple.com/kb/HT213254","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202210-03","name":"GLSA-202210-03","tags":["vendor-advisory","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T03:36:20.420Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-23308","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-04-23T13:27:14.908557Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-416","description":"CWE-416 Use After Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-05-05T16:26:56.501Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SINAMICS PERFECT HARMONY GH180","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-419740.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-942865.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T15:48:24.582Z"}}],"cna":{"orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre","dateUpdated":"2022-10-16T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-23308","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22106,"advisory_id":"bc06ba62-c39b-4f85-bb10-7e2e476749fe","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-23219","source_published_at":"2022-01-14T00:00:00+00:00","published_at":"2026-10-25T05:56:18.167379+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2022-23219"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-23219","summary":"The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution.","evidence":"cve:CVE-2022-23219","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-23219","aliases":["CVE-2022-23219"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T15:43:57.524Z","provider":"cve","references":["https://www.oracle.com/security-alerts/cpujul2022.html","https://sourceware.org/bugzilla/show_bug.cgi?id=22542","https://security.gentoo.org/glsa/202208-24","https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","tags":["x_transferred"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=22542","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202208-24","name":"GLSA-202208-24","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html","name":"[debian-lts-announce] 20221017 [SECURITY] [DLA 3152-1] glibc security update","tags":["mailing-list","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T03:36:20.178Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-23219","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-04-23T13:31:40.909589Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-120","description":"CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-05-05T16:27:25.152Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-099606.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T15:43:57.524Z"}}],"cna":{"orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre","dateUpdated":"2022-10-17T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-23219","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22105,"advisory_id":"ffc53b81-8c9a-421e-ad93-da2dd07b5591","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-23218","source_published_at":"2022-01-14T00:00:00+00:00","published_at":"2026-10-25T05:56:17.592296+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2022-23218"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-23218","summary":"The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution.","evidence":"cve:CVE-2022-23218","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-23218","aliases":["CVE-2022-23218"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T15:39:29.780Z","provider":"cve","references":["https://sourceware.org/bugzilla/show_bug.cgi?id=28768","https://www.oracle.com/security-alerts/cpujul2022.html","https://security.gentoo.org/glsa/202208-24","https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=28768","tags":["x_transferred"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202208-24","name":"GLSA-202208-24","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html","name":"[debian-lts-announce] 20221017 [SECURITY] [DLA 3152-1] glibc security update","tags":["mailing-list","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T03:36:20.198Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-23218","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-04-23T13:31:43.227591Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-120","description":"CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-05-05T16:27:38.029Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-099606.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T15:39:29.780Z"}}],"cna":{"orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre","dateUpdated":"2022-10-17T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2022-23218","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22096,"advisory_id":"5cc8e881-ab96-4f02-8653-05cfd6308091","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-22825","source_published_at":"2022-01-08T02:56:48+00:00","published_at":"2026-10-25T05:56:12.290849+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2022-22825"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-22825","summary":"lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.","evidence":"cve:CVE-2022-22825","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-22825","aliases":["CVE-2022-22825"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T15:25:49.378Z","provider":"cve","references":["https://github.com/libexpat/libexpat/pull/539","https://www.tenable.com/security/tns-2022-05","https://www.debian.org/security/2022/dsa-5073","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://security.gentoo.org/glsa/202209-24"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://github.com/libexpat/libexpat/pull/539","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2022/01/17/3","name":"[oss-security] 20220117 Expat 2.4.3 released, includes 8 security fixes","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://www.tenable.com/security/tns-2022-05","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.debian.org/security/2022/dsa-5073","name":"DSA-5073","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security.gentoo.org/glsa/202209-24","name":"GLSA-202209-24","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T03:28:42.447Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-22825","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-04-23T13:31:53.889017Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-190","description":"CWE-190 Integer Overflow or Wraparound"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-05-05T16:29:13.176Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-484086.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T15:25:49.378Z"}}],"cna":{"orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre","dateUpdated":"2022-09-29T16:06:59.000Z"}}},"related_cves":[{"value":"CVE-2022-22825","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22095,"advisory_id":"ecc7478f-ea87-465a-8a2c-25542566cc20","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-22827","source_published_at":"2022-01-08T02:56:30+00:00","published_at":"2026-10-25T05:56:11.34082+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2022-22827"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-22827","summary":"storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.","evidence":"cve:CVE-2022-22827","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-22827","aliases":["CVE-2022-22827"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T15:34:54.147Z","provider":"cve","references":["https://github.com/libexpat/libexpat/pull/539","https://www.tenable.com/security/tns-2022-05","https://www.debian.org/security/2022/dsa-5073","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://security.gentoo.org/glsa/202209-24"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://github.com/libexpat/libexpat/pull/539","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2022/01/17/3","name":"[oss-security] 20220117 Expat 2.4.3 released, includes 8 security fixes","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://www.tenable.com/security/tns-2022-05","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.debian.org/security/2022/dsa-5073","name":"DSA-5073","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security.gentoo.org/glsa/202209-24","name":"GLSA-202209-24","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T03:28:42.443Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-22827","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-04-23T13:31:57.959624Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-190","description":"CWE-190 Integer Overflow or Wraparound"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-05-05T16:28:54.738Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-484086.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T15:34:54.147Z"}}],"cna":{"orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre","dateUpdated":"2022-09-29T16:07:18.000Z"}}},"related_cves":[{"value":"CVE-2022-22827","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22094,"advisory_id":"859c69c7-6c51-4079-88f2-55729b9bf7a0","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-22826","source_published_at":"2022-01-08T02:56:39+00:00","published_at":"2026-10-25T05:56:10.762324+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2022-22826"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-22826","summary":"nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.","evidence":"cve:CVE-2022-22826","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-22826","aliases":["CVE-2022-22826"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T15:30:21.150Z","provider":"cve","references":["https://github.com/libexpat/libexpat/pull/539","https://www.tenable.com/security/tns-2022-05","https://www.debian.org/security/2022/dsa-5073","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://security.gentoo.org/glsa/202209-24"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://github.com/libexpat/libexpat/pull/539","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2022/01/17/3","name":"[oss-security] 20220117 Expat 2.4.3 released, includes 8 security fixes","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://www.tenable.com/security/tns-2022-05","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.debian.org/security/2022/dsa-5073","name":"DSA-5073","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security.gentoo.org/glsa/202209-24","name":"GLSA-202209-24","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T03:28:42.247Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-22826","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-04-23T13:31:56.179404Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-190","description":"CWE-190 Integer Overflow or Wraparound"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-05-05T16:29:03.187Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-484086.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T15:30:21.150Z"}}],"cna":{"orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre","dateUpdated":"2022-09-29T16:07:05.000Z"}}},"related_cves":[{"value":"CVE-2022-22826","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":22063,"advisory_id":"735ef48f-4ed4-4848-8c49-85d55a99a910","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-22824","source_published_at":"2022-01-08T02:56:58+00:00","published_at":"2026-10-25T05:55:51.511195+00:00","extraction_method":"structured","technologies":["core-cve","n-a"],"cve_ids":["CVE-2022-22824"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2022-22824","summary":"defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.","evidence":"cve:CVE-2022-22824","products":[{"name":{"value":"n/a","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-22824","aliases":["CVE-2022-22824"],"metrics":[],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"modified":"2026-10-14T15:21:17.507Z","provider":"cve","references":["https://github.com/libexpat/libexpat/pull/539","https://www.tenable.com/security/tns-2022-05","https://www.debian.org/security/2022/dsa-5073","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://security.gentoo.org/glsa/202209-24"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://github.com/libexpat/libexpat/pull/539","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2022/01/17/3","name":"[oss-security] 20220117 Expat 2.4.3 released, includes 8 security fixes","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://www.tenable.com/security/tns-2022-05","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.debian.org/security/2022/dsa-5073","name":"DSA-5073","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security.gentoo.org/glsa/202209-24","name":"GLSA-202209-24","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T03:28:42.378Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-22824","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-04-23T13:27:47.292328Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-190","description":"CWE-190 Integer Overflow or Wraparound"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-05-05T16:29:22.116Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-484086.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T15:21:17.507Z"}}],"cna":{"orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre","dateUpdated":"2022-09-29T16:07:03.000Z"}}},"related_cves":[{"value":"CVE-2022-22824","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}}],"next_after":22262,"next_before":22063}