CVE-2022-39135

Apache Calcite 1.22.0 introduced the SQL operators EXISTS_NODE, EXTRACT_XML, XML_TRANSFORM and EXTRACT_VALUE do not restrict XML External Entity references in their configuration, making them vulnerable to a potential XML External Entity (XXE) attack. Therefore any client exposing these operators, typically by using Oracle dialect (the first three) or MySQL dialect (the last one), is affected by this vulnerability (the extent of it will depend on the user under which the application is running). From Apache Calcite 1.32.0 onwards, Document Type Declarations and XML External Entity resolution are disabled on the impacted operators.

• CWE-611
• CWE-611

• http://www.openwall.com/lists/oss-security/2022/11/21/3Mailing List, Mitigation, Third Party Advisory
• https://lists.apache.org/thread/ohdnhlgm6jvt3srw8l7spkm2d5vwm082Mailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2022/11/21/3Mailing List, Mitigation, Third Party Advisory
• https://lists.apache.org/thread/ohdnhlgm6jvt3srw8l7spkm2d5vwm082Mailing List, Vendor Advisory

Published

Sep 11, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-3913Rapid7 Nexpose and InsightVM versions 6.6.82 through 6.6.177…5.3
• CVE-2022-39130In face detect driver, there is a possible out of bounds wri…5.5
• CVE-2022-39131In camera driver, there is a possible memory corruption due …5.5
• CVE-2022-39132In camera driver, there is a possible out of bounds write du…5.5
• CVE-2022-39133In wlan driver, there is a possible missing bounds check, Th…5.5
• CVE-2022-39134In audio driver, there is a use after free due to a race con…4.7
• CVE-2022-39136A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2022-39137A vulnerability has been identified in Parasolid V33.1 (All …7.8
• CVE-2022-39138A vulnerability has been identified in Parasolid V33.1 (All …7.8
• CVE-2022-39139A vulnerability has been identified in Parasolid V33.1 (All …7.8
• CVE-2022-39140A vulnerability has been identified in Parasolid V33.1 (All …7.8
• CVE-2022-39141A vulnerability has been identified in Parasolid V33.1 (All …7.8