Every CVE whose affected-product data names Apache Commons Jxpath, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2022-40159 — CVSS 6.5 (medium): ** DISPUTED ** This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is…
CVE-2022-40160 — CVSS 6.5 (medium): ** DISPUTED ** This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is…