CVE-2022-34169

70

FAUCET Score

CVE-2022-34169 is an integer truncation vulnerability in the Apache Xalan Java XSLT library, affecting products like Apache, Oracle, and Debian. This flaw allows attackers to corrupt Java class files via malicious XSLT stylesheets, leading to arbitrary Java bytecode execution. With a CVSS score of 7.5 (HIGH), it is easily exploitable over the network with no user interaction, potentially resulting in high integrity impact. While not in CISA's KEV catalog, a fully demonstrated exploit has been publicly discussed, indicating a heightened risk. Organizations should update to Xalan Java 2.7.3 or later to mitigate this threat.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		<= 2.7.2CPE matchmatch criteria	cpe:2.3:a:apache:xalan-java::::::::
		10.0CPE matchmatch criteria	cpe:2.3:o:debian:debian_linux:10.0:::::::*
		11.0CPE matchmatch criteria	cpe:2.3:o:debian:debian_linux:11.0:::::::*
		20.3.6CPE matchmatch criteria	cpe:2.3:a:oracle:graalvm:20.3.6::::enterprise:::
		21.3.2CPE matchmatch criteria	cpe:2.3:a:oracle:graalvm:21.3.2::::enterprise:::

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

Exploitability Score

3.9

Impact Score

3.6

CvssVersion

3.1

Exploit Intelligence

EPSS Score

81.04%

Probability of exploitation in next 30 days

EPSS Percentile

99.6%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.8104 is in the 99th percentile among its peer group of 51,485 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (169)

mavenpatch availablevia ghsa

Product: xalan:xalanFixed in: 2.7.3

microsoftpatch availablevia msrc

Product: 16968-16820Fixed in: 1.8.0.332-2

microsoftpatch availablevia msrc

Product: cm1 openjdk8 1.8.0.332-2 on CBL Mariner 1.0Fixed in: 1.8.0.332-2

oraclepatch availablevia nvd_reference

redhatpatch availablevia redhat_api

Product: Red Hat Build of OpenJDK 17.0.4Fixed in: Windows

redhatpatch availablevia redhat_api

Product: Red Hat Build of OpenJDK 8u342

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: java-11-openjdk-1:11.0.16.0.8-1.el7_9

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: java-1.8.0-openjdk-1:1.8.0.342.b07-1.el7_9

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: java-11-openjdk-1:11.0.16.0.8-1.el8_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: java-1.8.0-openjdk-1:1.8.0.342.b07-2.el8_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: java-17-openjdk-1:17.0.4.0.8-2.el8_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.1 Update Services for SAP SolutionsFixed in: java-11-openjdk-1:11.0.16.0.8-1.el8_1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.1 Update Services for SAP SolutionsFixed in: java-1.8.0-openjdk-1:1.8.0.342.b07-1.el8_1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Extended Update SupportFixed in: java-11-openjdk-1:11.0.16.0.8-1.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Extended Update SupportFixed in: java-1.8.0-openjdk-1:1.8.0.342.b07-1.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Extended Update SupportFixed in: java-11-openjdk-1:11.0.16.0.8-1.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Extended Update SupportFixed in: java-1.8.0-openjdk-1:1.8.0.342.b07-1.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: java-11-openjdk-1:11.0.16.0.8-1.el9_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: java-1.8.0-openjdk-1:1.8.0.342.b07-1.el9_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: java-17-openjdk-1:17.0.4.0.8-2.el9_0

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7Fixed in: xalan

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-apache-cxf-0:3.1.16-3.SP1_redhat_00001.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-avro-0:1.7.6-2.redhat_00003.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-bouncycastle-0:1.68.0-1.redhat_00005.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-h2database-0:1.4.197-2.redhat_00005.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-jackson-databind-0:2.8.11.6-1.SP1_redhat_00001.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-jboss-marshalling-0:2.0.15-1.Final_redhat_00001.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-jboss-xnio-base-0:3.5.10-1.Final_redhat_00001.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-wildfly-0:7.1.8-2.GA_redhat_00002.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-xalan-j2-0:2.7.1-26.redhat_00015.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-apache-cxf-0:3.4.10-1.SP1_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-avro-0:1.7.6-8.redhat_00003.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-h2database-0:1.4.197-3.redhat_00004.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-jboss-annotations-api_1.3_spec-0:2.0.1-4.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-jboss-marshalling-0:2.0.15-1.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-jboss-server-migration-0:1.7.2-12.Final_redhat_00013.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-jboss-xnio-base-0:3.7.13-1.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-log4j-jboss-logmanager-0:1.2.2-2.Final_redhat_00002.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-wildfly-0:7.3.11-4.GA_redhat_00002.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-wss4j-0:2.3.3-2.redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-xalan-j2-0:2.7.1-38.redhat_00015.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-xml-security-0:2.2.3-2.redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-hal-console-0:3.3.24-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-hibernate-validator-0:6.0.23-2.SP1_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-insights-java-client-0:1.1.3-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-ironjacamar-0:1.5.18-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-jboss-cert-helper-0:1.1.3-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-jboss-ejb-client-0:4.0.55-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-jboss-server-migration-0:1.10.0-39.Final_redhat_00039.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-jbossws-cxf-0:5.4.12-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-jsoup-0:1.15.4-1.redhat_00003.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-undertow-jastow-0:2.0.15-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-wildfly-0:7.4.19-1.GA_redhat_00002.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-xalan-j2-0:2.7.1-37.redhat_00015.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-hal-console-0:3.3.24-1.Final_redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-hibernate-validator-0:6.0.23-2.SP1_redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-insights-java-client-0:1.1.3-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-ironjacamar-0:1.5.18-1.Final_redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-jboss-cert-helper-0:1.1.3-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-jboss-ejb-client-0:4.0.55-1.Final_redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-jboss-server-migration-0:1.10.0-39.Final_redhat_00039.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-jbossws-cxf-0:5.4.12-1.Final_redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-jsoup-0:1.15.4-1.redhat_00003.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-undertow-jastow-0:2.0.15-1.Final_redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-wildfly-0:7.4.19-1.GA_redhat_00002.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-xalan-j2-0:2.7.1-37.redhat_00015.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-hal-console-0:3.3.24-1.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-hibernate-validator-0:6.0.23-2.SP1_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-insights-java-client-0:1.1.3-1.redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-ironjacamar-0:1.5.18-1.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-jboss-cert-helper-0:1.1.3-1.redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-jboss-ejb-client-0:4.0.55-1.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-jboss-server-migration-0:1.10.0-39.Final_redhat_00039.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-jbossws-cxf-0:5.4.12-1.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-jsoup-0:1.15.4-1.redhat_00003.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-undertow-jastow-0:2.0.15-1.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-wildfly-0:7.4.19-1.GA_redhat_00002.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-xalan-j2-0:2.7.1-37.redhat_00015.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8Fixed in: xalan

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-activemq-artemis-0:2.33.0-1.redhat_00015.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-activemq-artemis-native-1:2.0.0-2.redhat_00005.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-aesh-extensions-0:1.8.0-2.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-aesh-readline-0:2.2.0-2.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-apache-commons-codec-0:1.16.1-2.redhat_00007.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-apache-commons-collections-0:3.2.2-28.redhat_2.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-apache-commons-io-0:2.15.1-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-apache-commons-lang-0:3.14.0-2.redhat_00006.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-apache-cxf-0:4.0.5-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-artemis-native-1:2.0.0-2.redhat_00005.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-artemis-wildfly-integration-0:2.0.1-1.redhat_00002.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-asyncutil-0:0.1.0-2.redhat_00010.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-aws-java-sdk-0:1.12.284-2.redhat_00002.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-cryptacular-0:1.2.5-2.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-eap-product-conf-parent-0:800.4.0-1.GA_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-fastinfoset-0:2.1.0-4.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-hibernate-0:6.2.31-1.Final_redhat_00002.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-hibernate-validator-0:8.0.1-3.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-hppc-0:0.8.1-2.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-insights-java-client-0:1.1.3-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-jakarta-servlet-jsp-jstl-api-0:3.0.1-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-jboss-cert-helper-0:1.1.3-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-jboss-logging-0:3.5.3-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-jctools-0:4.0.2-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-jgroups-0:5.3.10-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-log4j-0:2.22.1-1.redhat_00002.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-narayana-0:6.0.3-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-nimbus-jose-jwt-0:9.37.3-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-objectweb-asm-0:9.6.0-1.redhat_00002.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-pem-keystore-0:2.3.0-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-resteasy-extensions-0:2.0.1-3.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-resteasy-spring-0:3.0.1-2.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-saaj-impl-0:3.0.4-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-shibboleth-java-support-0:8.0.0-6.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-slf4j-0:2.0.16-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-snakeyaml-0:2.2.0-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-wildfly-0:8.0.4-2.GA_redhat_00005.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-activemq-artemis-0:2.33.0-1.redhat_00015.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-activemq-artemis-native-1:2.0.0-2.redhat_00005.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-aesh-extensions-0:1.8.0-2.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-aesh-readline-0:2.2.0-2.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-apache-commons-codec-0:1.16.1-2.redhat_00007.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-apache-commons-collections-0:3.2.2-28.redhat_2.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-apache-commons-io-0:2.15.1-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-apache-commons-lang-0:3.14.0-2.redhat_00006.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-apache-cxf-0:4.0.5-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-artemis-native-1:2.0.0-2.redhat_00005.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-artemis-wildfly-integration-0:2.0.1-1.redhat_00002.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-asyncutil-0:0.1.0-2.redhat_00010.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-aws-java-sdk-0:1.12.284-2.redhat_00002.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-cryptacular-0:1.2.5-2.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-eap-product-conf-parent-0:800.4.0-1.GA_redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-fastinfoset-0:2.1.0-4.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-hibernate-0:6.2.31-1.Final_redhat_00002.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-hibernate-validator-0:8.0.1-3.Final_redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-hppc-0:0.8.1-2.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-insights-java-client-0:1.1.3-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-jakarta-servlet-jsp-jstl-api-0:3.0.1-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-jboss-cert-helper-0:1.1.3-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-jboss-logging-0:3.5.3-1.Final_redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-jctools-0:4.0.2-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-jgroups-0:5.3.10-1.Final_redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-log4j-0:2.22.1-1.redhat_00002.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-narayana-0:6.0.3-1.Final_redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-nimbus-jose-jwt-0:9.37.3-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-objectweb-asm-0:9.6.0-1.redhat_00002.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-pem-keystore-0:2.3.0-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-resteasy-spring-0:3.0.1-2.Final_redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-saaj-impl-0:3.0.4-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-shibboleth-java-support-0:8.0.0-6.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-slf4j-0:2.0.16-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-snakeyaml-0:2.2.0-1.redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-wildfly-0:8.0.4-2.GA_redhat_00005.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-resteasy-extensions-0:2.0.1-3.Final_redhat_00001.1.el9eap

redhatpatch availablevia redhat_api

Product: Red Hat build of Apache Camel 3.20.6 for Spring BootFixed in: xalan

redhatpatch availablevia redhat_api

Product: Red Hat Build of OpenJDK 11.0.16

redhatpatch availablevia redhat_api

Product: Red Hat Build of OpenJDK 17.0.4Fixed in: Linux

redhatno patchvia redhat_api

Product: Red Hat build of Apache Camel for Spring Boot 3Fixed in: xalan

redhatno patchvia redhat_api

Product: Red Hat Build of KeycloakFixed in: xalan

redhatno patchvia redhat_api

Product: Red Hat build of OpenJDK 11Fixed in: Linux

redhatno patchvia redhat_api

Product: Red Hat build of OpenJDK 11Fixed in: Windows

redhatno patchvia redhat_api

Product: Red Hat build of OpenJDK 1.8Fixed in: Linux

redhatno patchvia redhat_api

Product: Red Hat build of OpenJDK 1.8Fixed in: Windows

redhatno patchvia redhat_api

Product: Red Hat build of OptaPlanner 8Fixed in: xalan

redhatno patchvia redhat_api

Product: Red Hat JBoss Enterprise Application Platform Expansion PackFixed in: xalan

redhatno patchvia redhat_api

Product: Red Hat build of Apache Camel 4 for Quarkus 3Fixed in: xalan

redhatend of lifevia redhat_api

Product: Migration Toolkit for Applications 6Fixed in: xalan

redhatend of lifevia redhat_api

Product: streams for Apache KafkaFixed in: xalan

redhatend of lifevia redhat_api

Product: Red Hat Fuse 7Fixed in: xalan

redhatend of lifevia redhat_api

Product: Red Hat JBoss Data Grid 7Fixed in: xalan

Vendor Advisories (3)

mavenGHSA-9339-86wc-4qgfhigh

Apache Xalan Java XSLT library integer truncation issue when processing malicious XSLT stylesheets

redhatCVE-2022-34169Important

OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407)

microsoft2022-Jul/CVE-2022-34169Important

Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

References

packetstormsecurity.com / files/168186/Xalan-J-XSLTC-Integer-Truncation.html

Third Party AdvisoryVDB Entry

lists.apache.org / thread/12pxy4phsry6c34x2ol4fft6xlho4kyw

Issue TrackingMailing ListVendor Advisory

lists.apache.org / thread/2qvl7r43wb4t8p9dd9om1bnkssk07sn8

Issue TrackingMailing ListVendor Advisory

lists.debian.org / debian-lts-announce/2022/10/msg00024.html

Mailing ListThird Party Advisory

lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/H4YNJSJ64NPCNKFPNBYITNZU5H3L4D6L

lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/I5OZNAZJ4YHLOKRRRZSWRT5OJ25E4XLM

lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/JN3EVGR7FD3ZLV5SBTJXUIDCMSK4QUE2

lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/KO3DXNKZ4EU3UZBT6AAR4XRKCD73KLMO

lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/L3XPOTPPBZIPFBZHQE5E7OW6PDACUMCJ

lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/YULPNO3PAWMEQQZV2C54I3H3ZOXFZUTB

security.gentoo.org / glsa/202401-25

security.netapp.com / advisory/ntap-20220729-0009

Third Party Advisory

security.netapp.com / advisory/ntap-20240621-0006

debian.org / security/2022/dsa-5188

Third Party Advisory

debian.org / security/2022/dsa-5192

Third Party Advisory

debian.org / security/2022/dsa-5256

Third Party Advisory

oracle.com / security-alerts/cpujul2022.html

PatchThird Party Advisory

openwall.com / lists/oss-security/2022/07/19/5

Mailing ListThird Party Advisory

openwall.com / lists/oss-security/2022/07/19/6

Mailing ListThird Party Advisory

openwall.com / lists/oss-security/2022/07/20/2

Mailing ListThird Party Advisory

openwall.com / lists/oss-security/2022/07/20/3

Mailing ListPatchThird Party Advisory

openwall.com / lists/oss-security/2022/10/18/2

Mailing ListPatchThird Party Advisory

openwall.com / lists/oss-security/2022/11/04/8

Mailing ListThird Party Advisory

openwall.com / lists/oss-security/2022/11/07/2

Mailing ListThird Party Advisory