Apache Uimaducc vulnerabilities

2 CVEs affecting Apache Uimaducc, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-8035, published 2019-05-01.

More from Apache.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-15691, published 2018-04-26. Medium severity, CVSS 6.5. EPSS: 8.9% chance of exploitation in the next 30 days. In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates…
• CVE-2018-8035, published 2019-05-01. Medium severity, CVSS 6.1. EPSS: 4.9% chance of exploitation in the next 30 days. This vulnerability relates to the user's browser processing of DUCC webpage input data.The javascript comprising Apache UIMA DUCC (<= 2.2.2) which runs in the user's browser does not sufficiently…