● CVE — Medium
CVE-2022-23437
Vendororacle, apacheProductpeoplesoft enterprise peopletools, agile product lifecycle management, flexcube universal banking, financial services analytical applications infrastructure, health sciences information manager, primavera gateway, retail integration bus, xerces-j, agile plm, agile engineering data management, communications element manager, communications session report manager, communications session route manager, ilearning, global lifecycle management opatch, global lifecycle management nextgen oui framework, retail bulk data integration, retail financial integration, communications asap, financial services crime and compliance management studio, banking party management, banking deposits and lines of credit servicing, financial services enterprise case management, retail extract transform and load, product lifecycle analytics, financial services behavior detection platformDiscoveredJan 24, 2022UpdatedAug 25, 2026
There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present within XercesJ version 2.12.1 and the previous versions.