Zulu vulnerabilities

2 known vulnerabilities in Zulu from Azul. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  webMethods OneData: Deserialization of Untrusted Data

  CVE-2023-0925Sep 6, 2023Software

  Version 10.11 of webMethods OneData runs an embedded instance of Azul Zulu Java 11.0.15 which hosts a Java RMI registry (listening on TCP port 2099 by default) and two RMI interfaces (listening on a single, dynamically assigned TCP high port). Port 2099 serves

• 7.5 High severity

  Apache Xalan-J: Incorrect Conversion between Numeric Types

  CVE-2022-34169Jul 19, 2022ApacheEPSS 81.8%

  The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are rec