Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log inLog in

Home
Vendors
Xerces

Common weakness types

RadicalNotion.AI

We do not sell or share your personal information

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Company

About us
Blog
Learn
Book a demo

Get Started

Legal

Privacy
Terms

Home
Vendors
Xerces

xerces Vulnerabilities: CVEs, CISA KEV & Security Advisories

5 CVEs

xerces Vulnerabilities

CVE security advisories and vulnerability history for xerces.

Total CVEs

Published

In CISA KEV

Exploited in the wild

Public exploits

With known exploit

N/A

Avg CVSS

2009–2022

Overview

xerces has 5 published CVE records since 2009, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit.

This page aggregates every publicly disclosed vulnerability (CVE) affecting xerces products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Most affected products

The xerces products with the most published CVEs.

xerces:xercesImpl5 CVEs
xerces2 java3 CVEs
jdk2 CVEs
opensuse2 CVEs
linux enterprise server2 CVEs
ubuntu linux2 CVEs
banking party management1 CVEs
banking deposits and lines of credit servicing1 CVEs

On this page

Overview
Most affected products
Common weakness types
Assigning CNAs
Disclosure activity
Latest CVEs
Other vendors
FAQ
References

Common weakness types

The CWE weakness categories most often found in xerces CVEs. Follow any weakness for its full explanation.

CWE-20Improper Input Validation1 CVE

CNAs that assign these CVEs

The CVE Numbering Authorities that publish xerces CVE records.

redhat2 CVEs
apache1 CVEs
certcc1 CVEs
ibm1 CVEs

Disclosure activity by year

How many xerces CVEs were published each year.

2009

2013

2017

2020

2022

Latest xerces CVEs

The most recently disclosed vulnerabilities affecting xerces.

Vulnerability vulnerability · 2022-01-24
Unscored
EPSS 0.1%2022-01-24
Vulnerability vulnerability · 2020-09-17
CWE-20
Unscored
EPSS 0.4%2020-09-17
Vulnerability vulnerability · 2017-10-30
Unscored
EPSS 2.2%2017-10-30
Vulnerability vulnerability · 2013-07-23
Unscored
EPSS 8.0%2013-07-23
Vulnerability vulnerability · 2009-08-06
Unscored
EPSS 1.0%2009-08-06

Track new xerces CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor xerces CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

microsoft24,097 CVEs Linux19,131 CVEs google14,281 CVEs apple14,019 CVEs oracle10,440 CVEs debian10,201 CVEs IBM8,265 CVEs Adobe7,222 CVEs

Browse all vendors

Frequently asked questions

Common questions about xerces vulnerabilities.

How many CVEs does xerces have?

xerces has 5 published CVE records since 2009, including 0 in the last two years.

How many xerces CVEs are in CISA KEV?

None of xerces's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which xerces products have the most CVEs?

The xerces products with the most published CVEs are xerces:xercesImpl, xerces2 java, jdk, opensuse, linux enterprise server.

What are the most common weakness types in xerces CVEs?

xerces's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation).

Are there public exploits for xerces vulnerabilities?

No xerces CVEs currently have a tracked public exploit in this dataset.

References

The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to
CNA directory: the CNAs that assign these CVEs

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track xerces vulnerabilities

Monitor new xerces vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing