CyberSecBulletin

Azul vulnerabilities

We track 2 vulnerabilities in Azul products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 6, 2023.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest Azul vulnerabilities

  • 9.8 Critical severity

    webMethods OneData: Deserialization of Untrusted Data

    CVE-2023-0925Software

    Version 10.11 of webMethods OneData runs an embedded instance of Azul Zulu Java 11.0.15 which hosts a Java RMI registry (listening on TCP port 2099 by default) and two RMI interfaces (listening on a single, dynamically assigned TCP high port). Port 2099 serves

  • 7.5 High severity

    Apache Xalan-J: Incorrect Conversion between Numeric Types

    CVE-2022-34169ApacheEPSS 81.8%

    The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are rec