Most recent entries from all

bdu:2025-06619

EUVD-2026-194280

fkie_cve-2024-28168

Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP.

This issue affects Apache XML Graphics FOP: 2.9.

Users are recommended to upgrade to version 2.10, which fixes the issue.

GHSA-jqfv-jrvq-95jm — Apache XML Graphics FOP XML External Entity Reference ('XXE') vulnerability

Affected: Maven: org.apache.xmlgraphics:fop-core

Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP.

This issue affects Apache XML Graphics FOP: 2.9.

Users are recommended to upgrade to version 2.10, which fixes the issue.

gsd-2024-28168

OESA-2024-2243 — fop security update

Affected: openEuler:20.03-LTS-SP4: fop, openEuler:22.03-LTS-SP1: fop, openEuler:24.03-LTS: fop, openEuler:22.03-LTS-SP4: fop, openEuler:22.03-LTS-SP3: fop

FOP (Formatting Objects Processor) is a print formatter driven by XSL formatting objects (XSL-FO) and an output independent formatter. It is a Java application that reads a formatting object (FO) tree and renders the resulting pages to a specified output. Output formats currently supported include PDF, PS, PCL, AFP, XML (area tree representation), Print, AWT and PNG, and to a lesser extent, RTF and TXT. The primary output target is PDF. Security Fix(es): Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue.(CVE-2024-28168)

openSUSE-SU-2024:14398-1 — xmlgraphics-fop-2.10-1.1 on GA media

xmlgraphics-fop-2.10-1.1 on GA media

UBUNTU-CVE-2024-28168

Affected: Ubuntu:16.04:LTS: fop, Ubuntu:18.04:LTS: fop, Ubuntu:20.04:LTS: fop, Ubuntu:22.04:LTS: fop, Ubuntu:24.04:LTS: fop, Ubuntu:25.10: fop, Ubuntu:26.04:LTS: fop

Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue.

WID-SEC-W-2025-0299 — IBM Business Automation Workflow: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Business Automation Workflow ausnutzen, um Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen, einen Denial of Service herbeizuführen oder um ein Cross-Site-Scritping auszuführen.