Apache Software Foundation Apache XML Graphics

• CVE-2022-41704 High 7.5 Apache Batik prior to 1.16 allows RCE when loading untrusted SVG input 3.1%
• CVE-2022-42890 Unrated Apache Batik prior to 1.16 allows RCE via scripting 3.4%
• CVE-2022-38398 Unrated Server-Side Request Forgery Information Disclosure Vulnerability 2.6%
• CVE-2022-38648 Unrated PDFTranscoder does not block external resources 2.4%
• CVE-2022-40146 Unrated Jar url should be blocked by DefaultScriptSecurity 7.4%