Apache - CVE CyberSecurity Database News (Page 3)

Oct 17, 2025 RCE XXE Windows Java Apache

CVE-2024-31573 - How a Simple XMLUnit for Java Bug Can Open the Door to Remote Code Execution

Summary: In March 2024, a new vulnerability was identified in XMLUnit for Java—CVE-2024-31573. This issue, lurking since the early days of the library and

Oct 9, 2025 Exploit SQL Java Oracle Apache

CVE-2025-62228 - Apache Flink CDC 3.4. SQL Injection Vulnerability Explained

On March 7, 2025, security researchers identified a critical vulnerability in Apache Flink CDC, specifically in version 3.4.. Tracked as CVE-2025-62228, this flaw allows

May 29, 2025 Exploit Apache

CVE-2025-46701 - Security Constraint Bypass in Apache Tomcat CGI Servlet (Case Sensitivity Vulnerability)

On June 12, 2024, a new security vulnerability, CVE-2025-46701, was published that affects multiple versions of the Apache Tomcat server. This vulnerability is due to

May 28, 2025 Java Apache

CVE-2025-48734 - Improper Access Control Vulnerability in Apache Commons BeanUtils

A recently discovered vulnerability (CVE-2025-48734) in Apache Commons BeanUtils can allow attackers to gain elevated privileges and potentially execute arbitrary code on your Java application.

May 9, 2025 Java Apache

CVE-2025-46392 - Uncontrolled Resource Consumption in Apache Commons Configuration 1.x

A newly published vulnerability, CVE-2025-46392, affects the popular Apache Commons Configuration 1.x library. This vulnerability exposes systems to risks of Denial of Service (DoS)