CVE-2022-44729 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-44729 Interim 1 13 2026-03-05T04:34:43Z current 2024-03-03T00:23:59Z 2026-03-05T04:34:43Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-44729 Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2024-March/018100.html E-Mail link for SUSE-SU-2024:0777-1 https://lists.suse.com/pipermail/sle-updates/2024-March/034578.html E-Mail link for SUSE-SU-2024:0808-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 openSUSE Leap 15.5 openSUSE Tumbleweed xmlgraphics-batik xmlgraphics-batik-1.17-1.1 xmlgraphics-batik-1.17-150200.4.7.1 xmlgraphics-batik-1.17-2.7.1 xmlgraphics-batik-1.18-160000.2.2 xmlgraphics-batik-css xmlgraphics-batik-css-1.17-1.1 xmlgraphics-batik-css-1.17-150200.4.7.1 xmlgraphics-batik-css-1.18-160000.2.2 xmlgraphics-batik-demo-1.17-1.1 xmlgraphics-batik-demo-1.17-150200.4.7.1 xmlgraphics-batik-demo-1.18-160000.2.2 xmlgraphics-batik-javadoc-1.17-1.1 xmlgraphics-batik-javadoc-1.17-150200.4.7.1 xmlgraphics-batik-javadoc-1.18-160000.2.2 xmlgraphics-batik-rasterizer-1.17-1.1 xmlgraphics-batik-rasterizer-1.17-150200.4.7.1 xmlgraphics-batik-rasterizer-1.18-160000.2.2 xmlgraphics-batik-slideshow-1.17-1.1 xmlgraphics-batik-slideshow-1.17-150200.4.7.1 xmlgraphics-batik-slideshow-1.18-160000.2.2 xmlgraphics-batik-squiggle-1.17-1.1 xmlgraphics-batik-squiggle-1.17-150200.4.7.1 xmlgraphics-batik-squiggle-1.18-160000.2.2 xmlgraphics-batik-svgpp-1.17-1.1 xmlgraphics-batik-svgpp-1.17-150200.4.7.1 xmlgraphics-batik-svgpp-1.18-160000.2.2 xmlgraphics-batik-ttf2svg-1.17-1.1 xmlgraphics-batik-ttf2svg-1.17-150200.4.7.1 xmlgraphics-batik-ttf2svg-1.18-160000.2.2 xmlgraphics-batik-1.17-150200.4.7.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 xmlgraphics-batik-css-1.17-150200.4.7.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 xmlgraphics-batik-1.17-150200.4.7.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 xmlgraphics-batik-css-1.17-150200.4.7.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 xmlgraphics-batik-1.17-150200.4.7.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 xmlgraphics-batik-css-1.17-150200.4.7.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 xmlgraphics-batik-1.18-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 xmlgraphics-batik-css-1.18-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 xmlgraphics-batik-demo-1.18-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 xmlgraphics-batik-javadoc-1.18-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 xmlgraphics-batik-rasterizer-1.18-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 xmlgraphics-batik-slideshow-1.18-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 xmlgraphics-batik-squiggle-1.18-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 xmlgraphics-batik-svgpp-1.18-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 xmlgraphics-batik-ttf2svg-1.18-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 xmlgraphics-batik-1.17-2.7.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 xmlgraphics-batik-1.17-150200.4.7.1 as a component of openSUSE Leap 15.5 xmlgraphics-batik-css-1.17-150200.4.7.1 as a component of openSUSE Leap 15.5 xmlgraphics-batik-demo-1.17-150200.4.7.1 as a component of openSUSE Leap 15.5 xmlgraphics-batik-javadoc-1.17-150200.4.7.1 as a component of openSUSE Leap 15.5 xmlgraphics-batik-rasterizer-1.17-150200.4.7.1 as a component of openSUSE Leap 15.5 xmlgraphics-batik-slideshow-1.17-150200.4.7.1 as a component of openSUSE Leap 15.5 xmlgraphics-batik-squiggle-1.17-150200.4.7.1 as a component of openSUSE Leap 15.5 xmlgraphics-batik-svgpp-1.17-150200.4.7.1 as a component of openSUSE Leap 15.5 xmlgraphics-batik-ttf2svg-1.17-150200.4.7.1 as a component of openSUSE Leap 15.5 xmlgraphics-batik-1.17-1.1 as a component of openSUSE Tumbleweed xmlgraphics-batik-css-1.17-1.1 as a component of openSUSE Tumbleweed xmlgraphics-batik-demo-1.17-1.1 as a component of openSUSE Tumbleweed xmlgraphics-batik-javadoc-1.17-1.1 as a component of openSUSE Tumbleweed xmlgraphics-batik-rasterizer-1.17-1.1 as a component of openSUSE Tumbleweed xmlgraphics-batik-slideshow-1.17-1.1 as a component of openSUSE Tumbleweed xmlgraphics-batik-squiggle-1.17-1.1 as a component of openSUSE Tumbleweed xmlgraphics-batik-svgpp-1.17-1.1 as a component of openSUSE Tumbleweed xmlgraphics-batik-ttf2svg-1.17-1.1 as a component of openSUSE Tumbleweed xmlgraphics-batik as a component of SUSE Enterprise Storage 7 xmlgraphics-batik as a component of SUSE Enterprise Storage 7.1 xmlgraphics-batik-css as a component of SUSE Enterprise Storage 7.1 xmlgraphics-batik as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS xmlgraphics-batik-css as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS xmlgraphics-batik as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS xmlgraphics-batik-css as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS xmlgraphics-batik as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS xmlgraphics-batik-css as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS xmlgraphics-batik as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 xmlgraphics-batik-css as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 xmlgraphics-batik as a component of SUSE Linux Enterprise Real Time 15 SP3 xmlgraphics-batik-css as a component of SUSE Linux Enterprise Real Time 15 SP3 xmlgraphics-batik as a component of SUSE Linux Enterprise Server 15 SP2-LTSS xmlgraphics-batik-css as a component of SUSE Linux Enterprise Server 15 SP2-LTSS xmlgraphics-batik as a component of SUSE Linux Enterprise Server 15 SP3-LTSS xmlgraphics-batik-css as a component of SUSE Linux Enterprise Server 15 SP3-LTSS xmlgraphics-batik as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 xmlgraphics-batik-css as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 xmlgraphics-batik as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 xmlgraphics-batik-css as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later. CVE-2022-44729 SUSE Linux Enterprise Module for Development Tools 15 SP5:xmlgraphics-batik-1.17-150200.4.7.1 SUSE Linux Enterprise Module for Development Tools 15 SP5:xmlgraphics-batik-css-1.17-150200.4.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:xmlgraphics-batik-1.17-150200.4.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:xmlgraphics-batik-css-1.17-150200.4.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:xmlgraphics-batik-demo-1.17-150200.4.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:xmlgraphics-batik-javadoc-1.17-150200.4.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:xmlgraphics-batik-rasterizer-1.17-150200.4.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:xmlgraphics-batik-slideshow-1.17-150200.4.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:xmlgraphics-batik-squiggle-1.17-150200.4.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:xmlgraphics-batik-svgpp-1.17-150200.4.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:xmlgraphics-batik-ttf2svg-1.17-150200.4.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:xmlgraphics-batik-1.17-150200.4.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:xmlgraphics-batik-css-1.17-150200.4.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:xmlgraphics-batik-demo-1.17-150200.4.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:xmlgraphics-batik-javadoc-1.17-150200.4.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:xmlgraphics-batik-rasterizer-1.17-150200.4.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:xmlgraphics-batik-slideshow-1.17-150200.4.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:xmlgraphics-batik-squiggle-1.17-150200.4.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:xmlgraphics-batik-svgpp-1.17-150200.4.7.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:xmlgraphics-batik-ttf2svg-1.17-150200.4.7.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:xmlgraphics-batik-1.17-150200.4.7.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:xmlgraphics-batik-css-1.17-150200.4.7.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:xmlgraphics-batik-1.17-150200.4.7.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:xmlgraphics-batik-css-1.17-150200.4.7.1 SUSE Linux Enterprise Server 16.0:xmlgraphics-batik-1.18-160000.2.2 SUSE Linux Enterprise Server 16.0:xmlgraphics-batik-css-1.18-160000.2.2 SUSE Linux Enterprise Server 16.0:xmlgraphics-batik-demo-1.18-160000.2.2 SUSE Linux Enterprise Server 16.0:xmlgraphics-batik-javadoc-1.18-160000.2.2 SUSE Linux Enterprise Server 16.0:xmlgraphics-batik-rasterizer-1.18-160000.2.2 SUSE Linux Enterprise Server 16.0:xmlgraphics-batik-slideshow-1.18-160000.2.2 SUSE Linux Enterprise Server 16.0:xmlgraphics-batik-squiggle-1.18-160000.2.2 SUSE Linux Enterprise Server 16.0:xmlgraphics-batik-svgpp-1.18-160000.2.2 SUSE Linux Enterprise Server 16.0:xmlgraphics-batik-ttf2svg-1.18-160000.2.2 SUSE Linux Enterprise Software Development Kit 12 SP5:xmlgraphics-batik-1.17-2.7.1 openSUSE Leap 15.5:xmlgraphics-batik-1.17-150200.4.7.1 openSUSE Leap 15.5:xmlgraphics-batik-css-1.17-150200.4.7.1 openSUSE Leap 15.5:xmlgraphics-batik-demo-1.17-150200.4.7.1 openSUSE Leap 15.5:xmlgraphics-batik-javadoc-1.17-150200.4.7.1 openSUSE Leap 15.5:xmlgraphics-batik-rasterizer-1.17-150200.4.7.1 openSUSE Leap 15.5:xmlgraphics-batik-slideshow-1.17-150200.4.7.1 openSUSE Leap 15.5:xmlgraphics-batik-squiggle-1.17-150200.4.7.1 openSUSE Leap 15.5:xmlgraphics-batik-svgpp-1.17-150200.4.7.1 openSUSE Leap 15.5:xmlgraphics-batik-ttf2svg-1.17-150200.4.7.1 openSUSE Tumbleweed:xmlgraphics-batik-1.17-1.1 openSUSE Tumbleweed:xmlgraphics-batik-css-1.17-1.1 openSUSE Tumbleweed:xmlgraphics-batik-demo-1.17-1.1 openSUSE Tumbleweed:xmlgraphics-batik-javadoc-1.17-1.1 openSUSE Tumbleweed:xmlgraphics-batik-rasterizer-1.17-1.1 openSUSE Tumbleweed:xmlgraphics-batik-slideshow-1.17-1.1 openSUSE Tumbleweed:xmlgraphics-batik-squiggle-1.17-1.1 openSUSE Tumbleweed:xmlgraphics-batik-svgpp-1.17-1.1 openSUSE Tumbleweed:xmlgraphics-batik-ttf2svg-1.17-1.1 SUSE Enterprise Storage 7.1:xmlgraphics-batik SUSE Enterprise Storage 7.1:xmlgraphics-batik-css SUSE Enterprise Storage 7:xmlgraphics-batik SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:xmlgraphics-batik SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:xmlgraphics-batik-css SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:xmlgraphics-batik SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:xmlgraphics-batik-css SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xmlgraphics-batik SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xmlgraphics-batik-css SUSE Linux Enterprise Module for Development Tools 15 SP4:xmlgraphics-batik SUSE Linux Enterprise Module for Development Tools 15 SP4:xmlgraphics-batik-css SUSE Linux Enterprise Real Time 15 SP3:xmlgraphics-batik SUSE Linux Enterprise Real Time 15 SP3:xmlgraphics-batik-css SUSE Linux Enterprise Server 15 SP2-LTSS:xmlgraphics-batik SUSE Linux Enterprise Server 15 SP2-LTSS:xmlgraphics-batik-css SUSE Linux Enterprise Server 15 SP3-LTSS:xmlgraphics-batik SUSE Linux Enterprise Server 15 SP3-LTSS:xmlgraphics-batik-css SUSE Linux Enterprise Server for SAP Applications 15 SP2:xmlgraphics-batik SUSE Linux Enterprise Server for SAP Applications 15 SP2:xmlgraphics-batik-css SUSE Linux Enterprise Server for SAP Applications 15 SP3:xmlgraphics-batik SUSE Linux Enterprise Server for SAP Applications 15 SP3:xmlgraphics-batik-css important 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H