Apache Software Foundation Apache UIMA

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2022-32287Java SDK – 3.3.0Apache UIMA prior to 3.3.1 has a path traversal vulnerability when extracting (PEAR) archivesHIGH 7.52.1 %
CVE-2017-15691uimaj prior to 2.10.2 ; uimaj 3.0.0-xxx prior to 3.0.0-beta ; uima-as prior to 2.10.2 ; …In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, MEDIUM 6.58.9 %