Vulnerability Database · Debian · libxerces2-java · Version
libxerces2-java 2.12.2-1
2.12.2-1 is affected by 3 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 1 Medium 1 Low 0 Unrated 1
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
libxerces2-java 2.12.2-1 vulnerabilities
3 vulnerabilities cover libxerces2-java 2.12.2-1. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| Denial of Service Vulnerability in Apache Xerces2 Java Parser | 7.5 high | No fix published | 30 Oct 2017 |
| Infinite Loop Vulnerability in Apache Xerces Java (XercesJ) XML Parser - libxerces2-java | 6.5 medium | No fix published | 24 Jan 2022 |
| Denial of Service Vulnerability in libxerces2-java: Apache Xerces2 Java Parser Prior to 2.12.0 | N/A unrated | No fix published | 30 Oct 2017 |
Looking for another version, or everything Vulert holds for libxerces2-java?
Questions
About libxerces2-java 2.12.2-1
Is libxerces2-java 2.12.2-1 vulnerable?
Yes. 3 vulnerabilities in the Vulert database cover libxerces2-java 2.12.2-1: 0 critical, 1 high, 1 medium and 0 low, plus 1 not yet rated. Each entry above names the fixed version to move to.
How do I monitor libxerces2-java for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the libxerces2-java version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.