UpHeron
All vulnerabilities

Servers and applications

CVE-2022-34169

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 or later. Note: Java runtimes (such as OpenJDK) include repackaged copies of Xalan.

Severity
High 7.5
Published
19 Jul 2022
Last changed
17 Jun 2026
Added to UpHeron
22 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
JavaServers and applications · cpe:a:oracle:jdk
  • Version 1.7.0-update343
  • Version 1.8.0-update333
  • Version 11.0.15.1
  • Version 17.0.3.1
  • Version 18.0.1.1
JavaServers and applications · cpe:a:oracle:jre
  • Version 1.7.0-update343
  • Version 1.8.0-update333
  • Version 11.0.15.1
  • Version 17.0.3.1
  • Version 18.0.1.1
JavaServers and applications · cpe:a:oracle:openjdk
  • Version 18
  • From 17 up to 17.0.3
  • From 15 up to 15.0.7
  • From 13 up to 13.0.11
All 124 release lines
  • Version 7
  • Version 7-update1
  • Version 7-update2
  • Version 7-update3
  • Version 7-update4
  • Version 7-update5
  • Version 7-update6
  • Version 7-update7
  • Version 7-update9
  • Version 7-update10
  • Version 7-update11
  • Version 7-update13
  • Version 7-update15
  • Version 7-update17
  • Version 7-update21
  • Version 7-update25
  • Version 7-update40
  • Version 7-update45
  • Version 7-update51
  • Version 7-update55
  • Version 7-update60
  • Version 7-update65
  • Version 7-update67
  • Version 7-update72
  • Version 7-update76
  • Version 7-update80
  • Version 7-update85
  • Version 7-update91
  • Version 7-update95
  • Version 7-update97
  • Version 7-update99
  • Version 7-update101
  • Version 7-update111
  • Version 7-update121
  • Version 7-update131
  • Version 7-update141
  • Version 7-update151
  • Version 7-update161
  • Version 7-update171
  • Version 7-update181
  • Version 7-update191
  • Version 7-update201
  • Version 7-update211
  • Version 7-update221
  • Version 7-update231
  • Version 7-update241
  • Version 7-update251
  • Version 7-update261
  • Version 7-update271
  • Version 7-update281
  • Version 7-update291
  • Version 7-update301
  • Version 7-update311
  • Version 7-update321
  • Version 8
  • Version 8-milestone1
  • Version 8-milestone2
  • Version 8-milestone3
  • Version 8-milestone4
  • Version 8-milestone5
  • Version 8-milestone6
  • Version 8-milestone7
  • Version 8-milestone8
  • Version 8-milestone9
  • Version 8-update5
  • Version 8-update11
  • Version 8-update20
  • Version 8-update25
  • Version 8-update31
  • Version 8-update40
  • Version 8-update45
  • Version 8-update51
  • Version 8-update60
  • Version 8-update65
  • Version 8-update66
  • Version 8-update71
  • Version 8-update72
  • Version 8-update73
  • Version 8-update74
  • Version 8-update77
  • Version 8-update91
  • Version 8-update92
  • Version 8-update101
  • Version 8-update102
  • Version 8-update111
  • Version 8-update112
  • Version 8-update121
  • Version 8-update131
  • Version 8-update141
  • Version 8-update151
  • Version 8-update152
  • Version 8-update161
  • Version 8-update162
  • Version 8-update171
  • Version 8-update172
  • Version 8-update181
  • Version 8-update191
  • Version 8-update192
  • Version 8-update201
  • Version 8-update202
  • Version 8-update211
  • Version 8-update212
  • Version 8-update221
  • Version 8-update222
  • Version 8-update231
  • Version 8-update232
  • Version 8-update241
  • Version 8-update242
  • Version 8-update252
  • Version 8-update262
  • Version 8-update271
  • Version 8-update281
  • Version 8-update282
  • Version 8-update291
  • Version 8-update301
  • Version 8-update302
  • Version 8-update312
  • Version 8-update322
  • Version 8-update332
  • From 11 up to 11.0.15
  • From 13 up to 13.0.11
  • From 15 up to 15.0.7
  • From 17 up to 17.0.3
  • Version 18

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-34169
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-34169