CVE-2022-42890

HIGH · CVSS 7.5 EPSS 2.32%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-10-25 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-42890

Severity

HIGH

CVSS

7.5

EPSS

2.32%

Apache Java

Original NVD Description

A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.