vulnerability
Oracle WebLogic: CVE-2022-42890 : Critical Patch Update
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:C/I:N/A:N) | Oct 25, 2022 | Jul 19, 2023 | Oct 16, 2025 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:C/I:N/A:N)
Published
Oct 25, 2022
Added
Jul 19, 2023
Modified
Oct 16, 2025
Description
A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.
Solutions
oracle-weblogic-jul-2023-cpu-12_2_1_4_0oracle-weblogic-jul-2023-cpu-14_1_1_0_0
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.