Uimaj vulnerabilities

2 known vulnerabilities in Uimaj from Apache. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Apache UIMA Java SDK Core: Deserialization of Untrusted Data

  CVE-2023-39913Nov 8, 2023ApacheEPSS 1.86%

  Deserialization of Untrusted Data, Improper Input Validation vulnerability in Apache UIMA Java SDK, Apache UIMA Java SDK, Apache UIMA Java SDK, Apache UIMA Java SDK.This issue affects Apache UIMA Java SDK: before 3.5.0. Users are recommended to upgrade to vers

• 7.5 High severity

  Apache UIMA: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-32287Nov 3, 2022ApacheEPSS 2.08%

  A relative path traversal vulnerability in a FileUtil class used by the PEAR management component of Apache UIMA allows an attacker to create files outside the designated target directory using carefully crafted ZIP entry names. This issue affects Apache UIMA