Every CVE whose affected-product data names Apache Xalan-java, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2014-0107 — CVSS 7.5 (high): The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when…
CVE-2022-34169 — CVSS 7.5 (high): The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be…