[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fV5IXBU6TtewKiVPM2MNV-x--bF_ldpL9SrO3qxHFZe4":3,"g5a-ex:apache\u002Ftika@*":303,"g5a-family:apache\u002Ftika":305},{"success":4,"data":5},true,{"product":6,"versions":151,"topVulnerabilitiesByEpss":219,"kevVulnerabilities":280,"seoMetadata":281,"meta":300},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":150},"apache","tika",67,24,0,"2025-08-20",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,128,130,132,134,136,138,140,142,144,146,148],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"0.1",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"0.10",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"0.2",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"0.3",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"0.4",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"0.5",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"0.6",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"0.7",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"0.8",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"0.9",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"1.0",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"1.1",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"1.10",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"1.11",{"version":44,"cve_count":45,"kev_count":11,"has_kev":16},"1.12",1,{"version":47,"cve_count":11,"kev_count":11,"has_kev":16},"1.13",{"version":49,"cve_count":11,"kev_count":11,"has_kev":16},"1.14",{"version":51,"cve_count":11,"kev_count":11,"has_kev":16},"1.15",{"version":53,"cve_count":11,"kev_count":11,"has_kev":16},"1.16",{"version":55,"cve_count":11,"kev_count":11,"has_kev":16},"1.17",{"version":57,"cve_count":11,"kev_count":11,"has_kev":16},"1.18",{"version":59,"cve_count":11,"kev_count":11,"has_kev":16},"1.19",{"version":61,"cve_count":11,"kev_count":11,"has_kev":16},"1.19.1",{"version":63,"cve_count":11,"kev_count":11,"has_kev":16},"1.2",{"version":65,"cve_count":11,"kev_count":11,"has_kev":16},"1.20",{"version":67,"cve_count":11,"kev_count":11,"has_kev":16},"1.21",{"version":69,"cve_count":11,"kev_count":11,"has_kev":16},"1.22",{"version":71,"cve_count":11,"kev_count":11,"has_kev":16},"1.23",{"version":73,"cve_count":45,"kev_count":11,"has_kev":16},"1.24",{"version":75,"cve_count":11,"kev_count":11,"has_kev":16},"1.24.1",{"version":77,"cve_count":45,"kev_count":11,"has_kev":16},"1.25",{"version":79,"cve_count":11,"kev_count":11,"has_kev":16},"1.26",{"version":81,"cve_count":11,"kev_count":11,"has_kev":16},"1.27",{"version":83,"cve_count":11,"kev_count":11,"has_kev":16},"1.28",{"version":85,"cve_count":11,"kev_count":11,"has_kev":16},"1.28.1",{"version":87,"cve_count":11,"kev_count":11,"has_kev":16},"1.28.2",{"version":89,"cve_count":11,"kev_count":11,"has_kev":16},"1.28.3",{"version":91,"cve_count":11,"kev_count":11,"has_kev":16},"1.28.4",{"version":93,"cve_count":11,"kev_count":11,"has_kev":16},"1.28.5",{"version":95,"cve_count":11,"kev_count":11,"has_kev":16},"1.3",{"version":97,"cve_count":11,"kev_count":11,"has_kev":16},"1.4",{"version":99,"cve_count":11,"kev_count":11,"has_kev":16},"1.5",{"version":101,"cve_count":11,"kev_count":11,"has_kev":16},"1.6",{"version":103,"cve_count":11,"kev_count":11,"has_kev":16},"1.7",{"version":105,"cve_count":11,"kev_count":11,"has_kev":16},"1.8",{"version":107,"cve_count":45,"kev_count":11,"has_kev":16},"1.9",{"version":109,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.0",{"version":111,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.0",{"version":113,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.0",{"version":115,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.1",{"version":117,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.0",{"version":119,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.0",{"version":121,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.1",{"version":123,"cve_count":11,"kev_count":11,"has_kev":16},"2.5.0",{"version":125,"cve_count":11,"kev_count":11,"has_kev":16},"2.6.0",{"version":127,"cve_count":11,"kev_count":11,"has_kev":16},"2.7.0",{"version":129,"cve_count":11,"kev_count":11,"has_kev":16},"2.8.0",{"version":131,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.0",{"version":133,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.1",{"version":135,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.2",{"version":137,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.3",{"version":139,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.4",{"version":141,"cve_count":11,"kev_count":11,"has_kev":16},"3.0.0",{"version":143,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.0",{"version":145,"cve_count":11,"kev_count":11,"has_kev":16},"3.2.0",{"version":147,"cve_count":11,"kev_count":11,"has_kev":16},"3.2.1",{"version":149,"cve_count":11,"kev_count":11,"has_kev":16},"3.2.2","Tika by Apache is a technology product with 67 tracked versions and 24 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":45,"kev_count":11,"has_kev":16},{"version":47,"cve_count":11,"kev_count":11,"has_kev":16},{"version":49,"cve_count":11,"kev_count":11,"has_kev":16},{"version":51,"cve_count":11,"kev_count":11,"has_kev":16},{"version":53,"cve_count":11,"kev_count":11,"has_kev":16},{"version":55,"cve_count":11,"kev_count":11,"has_kev":16},{"version":57,"cve_count":11,"kev_count":11,"has_kev":16},{"version":59,"cve_count":11,"kev_count":11,"has_kev":16},{"version":61,"cve_count":11,"kev_count":11,"has_kev":16},{"version":63,"cve_count":11,"kev_count":11,"has_kev":16},{"version":65,"cve_count":11,"kev_count":11,"has_kev":16},{"version":67,"cve_count":11,"kev_count":11,"has_kev":16},{"version":69,"cve_count":11,"kev_count":11,"has_kev":16},{"version":71,"cve_count":11,"kev_count":11,"has_kev":16},{"version":73,"cve_count":45,"kev_count":11,"has_kev":16},{"version":75,"cve_count":11,"kev_count":11,"has_kev":16},{"version":77,"cve_count":45,"kev_count":11,"has_kev":16},{"version":79,"cve_count":11,"kev_count":11,"has_kev":16},{"version":81,"cve_count":11,"kev_count":11,"has_kev":16},{"version":83,"cve_count":11,"kev_count":11,"has_kev":16},{"version":85,"cve_count":11,"kev_count":11,"has_kev":16},{"version":87,"cve_count":11,"kev_count":11,"has_kev":16},{"version":89,"cve_count":11,"kev_count":11,"has_kev":16},{"version":91,"cve_count":11,"kev_count":11,"has_kev":16},{"version":93,"cve_count":11,"kev_count":11,"has_kev":16},{"version":95,"cve_count":11,"kev_count":11,"has_kev":16},{"version":97,"cve_count":11,"kev_count":11,"has_kev":16},{"version":99,"cve_count":11,"kev_count":11,"has_kev":16},{"version":101,"cve_count":11,"kev_count":11,"has_kev":16},{"version":103,"cve_count":11,"kev_count":11,"has_kev":16},{"version":105,"cve_count":11,"kev_count":11,"has_kev":16},{"version":107,"cve_count":45,"kev_count":11,"has_kev":16},{"version":109,"cve_count":11,"kev_count":11,"has_kev":16},{"version":111,"cve_count":11,"kev_count":11,"has_kev":16},{"version":113,"cve_count":11,"kev_count":11,"has_kev":16},{"version":115,"cve_count":11,"kev_count":11,"has_kev":16},{"version":117,"cve_count":11,"kev_count":11,"has_kev":16},{"version":119,"cve_count":11,"kev_count":11,"has_kev":16},{"version":121,"cve_count":11,"kev_count":11,"has_kev":16},{"version":123,"cve_count":11,"kev_count":11,"has_kev":16},{"version":125,"cve_count":11,"kev_count":11,"has_kev":16},{"version":127,"cve_count":11,"kev_count":11,"has_kev":16},{"version":129,"cve_count":11,"kev_count":11,"has_kev":16},{"version":131,"cve_count":11,"kev_count":11,"has_kev":16},{"version":133,"cve_count":11,"kev_count":11,"has_kev":16},{"version":135,"cve_count":11,"kev_count":11,"has_kev":16},{"version":137,"cve_count":11,"kev_count":11,"has_kev":16},{"version":139,"cve_count":11,"kev_count":11,"has_kev":16},{"version":141,"cve_count":11,"kev_count":11,"has_kev":16},{"version":143,"cve_count":11,"kev_count":11,"has_kev":16},{"version":145,"cve_count":11,"kev_count":11,"has_kev":16},{"version":147,"cve_count":11,"kev_count":11,"has_kev":16},{"version":149,"cve_count":11,"kev_count":11,"has_kev":16},[220,228,235,240,247,252,259,265,270,276],{"cveId":221,"description":222,"publishedDate":223,"cvssScore":224,"cvssVersion":225,"severity":226,"isKev":16,"epssScore":227},"CVE-2018-1335","From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. The mitigation is to upgrade to Tika 1.18.","2018-04-25",8.1,"v3.0","High",0.93972,{"cveId":229,"description":230,"publishedDate":231,"cvssScore":232,"cvssVersion":233,"severity":226,"isKev":16,"epssScore":234},"CVE-2021-33813","An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.","2021-06-16",7.5,"v3.1",0.19442,{"cveId":236,"description":237,"publishedDate":238,"cvssScore":232,"cvssVersion":225,"severity":226,"isKev":16,"epssScore":239},"CVE-2018-11761","In Apache Tika 0.1 to 1.18, the XML parsers were not configured to limit entity expansion. They were therefore vulnerable to an entity expansion vulnerability which can lead to a denial of service attack.","2018-09-19",0.09635,{"cveId":241,"description":242,"publishedDate":243,"cvssScore":244,"cvssVersion":233,"severity":245,"isKev":16,"epssScore":246},"CVE-2016-6809","Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization.","2017-04-06",9.8,"Critical",0.0809,{"cveId":248,"description":249,"publishedDate":250,"cvssScore":232,"cvssVersion":225,"severity":226,"isKev":16,"epssScore":251},"CVE-2018-11796","In Apache Tika 1.19 (CVE-2018-11761), we added an entity expansion limit for XML parsing. However, Tika reuses SAXParsers and calls reset() after each parse, which, for Xerces2 parsers, as per the documentation, removes the user-specified SecurityManager and thus removes entity expansion limits after the first parse. Apache Tika versions from 0.1 to 1.19 are therefore still vulnerable to entity expansions which can lead to a denial of service attack. Users should upgrade to 1.19.1 or later.","2018-10-09",0.06883,{"cveId":253,"description":254,"publishedDate":255,"cvssScore":256,"cvssVersion":225,"severity":257,"isKev":16,"epssScore":258},"CVE-2015-3271","Apache Tika server (aka tika-server) in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header.","2016-12-15",5.3,"Medium",0.06522,{"cveId":260,"description":261,"publishedDate":262,"cvssScore":263,"cvssVersion":225,"severity":257,"isKev":16,"epssScore":264},"CVE-2018-17197","A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika.","2018-12-24",6.5,0.05934,{"cveId":266,"description":267,"publishedDate":238,"cvssScore":268,"cvssVersion":225,"severity":257,"isKev":16,"epssScore":269},"CVE-2018-11762","In Apache Tika 0.9 to 1.18, in a rare edge case where a user does not specify an extract directory on the commandline (--extract-dir=) and the input file has an embedded file with an absolute path, such as \"C:\u002Fevil.bat\", tika-app would overwrite that file.",5.9,0.05449,{"cveId":271,"description":272,"publishedDate":273,"cvssScore":274,"cvssVersion":225,"severity":226,"isKev":16,"epssScore":275},"CVE-2019-10088","A carefully crafted or corrupt zip file can cause an OOM in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Users should upgrade to 1.22 or later.","2019-08-02",8.8,0.0484,{"cveId":277,"description":278,"publishedDate":273,"cvssScore":263,"cvssVersion":225,"severity":257,"isKev":16,"epssScore":279},"CVE-2019-10093","In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the pool and lead to very long hangs. Apache Tika users should upgrade to 1.22 or later.",0.03699,[],{"title":282,"metaDescription":283,"keywords":284,"structuredData":285},"Tika by Apache - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Tika by Apache covering 67 versions with 24 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Tika vulnerabilities, Tika security, Tika CVE, Apache Tika, Tika threat intelligence, Apache security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":286,"@type":287,"name":288,"description":283,"url":289,"manufacturer":290,"applicationCategory":294,"softwareVersion":295,"mainEntity":296},"https:\u002F\u002Fschema.org","SoftwareApplication","Tika","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fapache\u002Ftika",{"@type":291,"name":292,"url":293},"Organization","Apache","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fapache","Security Software","67 versions tracked",{"@type":297,"name":298,"description":299,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Tika Security Vulnerabilities","Security vulnerabilities affecting Tika by Apache",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":301,"apiVersion":302},"2026-10-28T13:51:10.984Z","3.0",{"rows":304,"total":11,"capped":16,"failed":11},[],[]]