Apache Uimaj vulnerabilities

3 CVEs affecting Apache Uimaj, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-39913, published 2023-11-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-15691, published 2018-04-26. Medium severity, CVSS 6.5. EPSS: 8.9% chance of exploitation in the next 30 days. In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates…
CVE-2022-32287, published 2022-11-03. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. A relative path traversal vulnerability in a FileUtil class used by the PEAR management component of Apache UIMA allows an attacker to create files outside the designated target directory using…
CVE-2023-39913, published 2023-11-08. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. Deserialization of Untrusted Data, Improper Input Validation vulnerability in Apache UIMA Java SDK, Apache UIMA Java SDK, Apache UIMA Java SDK, Apache UIMA Java SDK.This issue affects Apache UIMA…