[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fV5IXBU6TtewKiVPM2MNV-x--bF_ldpL9SrO3qxHFZe4":3,"g5a-ex:apache\u002Ftika@*":304,"g5a-family:apache\u002Ftika":306},{"success":4,"data":5},true,{"product":6,"versions":151,"topVulnerabilitiesByEpss":219,"kevVulnerabilities":281,"seoMetadata":282,"meta":301},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":150},"apache","tika",67,24,0,"2025-08-20",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,128,130,132,134,136,138,140,142,144,146,148],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"0.1",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"0.10",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"0.2",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"0.3",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"0.4",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"0.5",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"0.6",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"0.7",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"0.8",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"0.9",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"1.0",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"1.1",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"1.10",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"1.11",{"version":44,"cve_count":45,"kev_count":11,"has_kev":16},"1.12",1,{"version":47,"cve_count":11,"kev_count":11,"has_kev":16},"1.13",{"version":49,"cve_count":11,"kev_count":11,"has_kev":16},"1.14",{"version":51,"cve_count":11,"kev_count":11,"has_kev":16},"1.15",{"version":53,"cve_count":11,"kev_count":11,"has_kev":16},"1.16",{"version":55,"cve_count":11,"kev_count":11,"has_kev":16},"1.17",{"version":57,"cve_count":11,"kev_count":11,"has_kev":16},"1.18",{"version":59,"cve_count":11,"kev_count":11,"has_kev":16},"1.19",{"version":61,"cve_count":11,"kev_count":11,"has_kev":16},"1.19.1",{"version":63,"cve_count":11,"kev_count":11,"has_kev":16},"1.2",{"version":65,"cve_count":11,"kev_count":11,"has_kev":16},"1.20",{"version":67,"cve_count":11,"kev_count":11,"has_kev":16},"1.21",{"version":69,"cve_count":11,"kev_count":11,"has_kev":16},"1.22",{"version":71,"cve_count":11,"kev_count":11,"has_kev":16},"1.23",{"version":73,"cve_count":45,"kev_count":11,"has_kev":16},"1.24",{"version":75,"cve_count":11,"kev_count":11,"has_kev":16},"1.24.1",{"version":77,"cve_count":45,"kev_count":11,"has_kev":16},"1.25",{"version":79,"cve_count":11,"kev_count":11,"has_kev":16},"1.26",{"version":81,"cve_count":11,"kev_count":11,"has_kev":16},"1.27",{"version":83,"cve_count":11,"kev_count":11,"has_kev":16},"1.28",{"version":85,"cve_count":11,"kev_count":11,"has_kev":16},"1.28.1",{"version":87,"cve_count":11,"kev_count":11,"has_kev":16},"1.28.2",{"version":89,"cve_count":11,"kev_count":11,"has_kev":16},"1.28.3",{"version":91,"cve_count":11,"kev_count":11,"has_kev":16},"1.28.4",{"version":93,"cve_count":11,"kev_count":11,"has_kev":16},"1.28.5",{"version":95,"cve_count":11,"kev_count":11,"has_kev":16},"1.3",{"version":97,"cve_count":11,"kev_count":11,"has_kev":16},"1.4",{"version":99,"cve_count":11,"kev_count":11,"has_kev":16},"1.5",{"version":101,"cve_count":11,"kev_count":11,"has_kev":16},"1.6",{"version":103,"cve_count":11,"kev_count":11,"has_kev":16},"1.7",{"version":105,"cve_count":11,"kev_count":11,"has_kev":16},"1.8",{"version":107,"cve_count":45,"kev_count":11,"has_kev":16},"1.9",{"version":109,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.0",{"version":111,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.0",{"version":113,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.0",{"version":115,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.1",{"version":117,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.0",{"version":119,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.0",{"version":121,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.1",{"version":123,"cve_count":11,"kev_count":11,"has_kev":16},"2.5.0",{"version":125,"cve_count":11,"kev_count":11,"has_kev":16},"2.6.0",{"version":127,"cve_count":11,"kev_count":11,"has_kev":16},"2.7.0",{"version":129,"cve_count":11,"kev_count":11,"has_kev":16},"2.8.0",{"version":131,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.0",{"version":133,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.1",{"version":135,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.2",{"version":137,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.3",{"version":139,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.4",{"version":141,"cve_count":11,"kev_count":11,"has_kev":16},"3.0.0",{"version":143,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.0",{"version":145,"cve_count":11,"kev_count":11,"has_kev":16},"3.2.0",{"version":147,"cve_count":11,"kev_count":11,"has_kev":16},"3.2.1",{"version":149,"cve_count":11,"kev_count":11,"has_kev":16},"3.2.2","Tika by Apache is a technology product with 67 tracked versions and 24 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":45,"kev_count":11,"has_kev":16},{"version":47,"cve_count":11,"kev_count":11,"has_kev":16},{"version":49,"cve_count":11,"kev_count":11,"has_kev":16},{"version":51,"cve_count":11,"kev_count":11,"has_kev":16},{"version":53,"cve_count":11,"kev_count":11,"has_kev":16},{"version":55,"cve_count":11,"kev_count":11,"has_kev":16},{"version":57,"cve_count":11,"kev_count":11,"has_kev":16},{"version":59,"cve_count":11,"kev_count":11,"has_kev":16},{"version":61,"cve_count":11,"kev_count":11,"has_kev":16},{"version":63,"cve_count":11,"kev_count":11,"has_kev":16},{"version":65,"cve_count":11,"kev_count":11,"has_kev":16},{"version":67,"cve_count":11,"kev_count":11,"has_kev":16},{"version":69,"cve_count":11,"kev_count":11,"has_kev":16},{"version":71,"cve_count":11,"kev_count":11,"has_kev":16},{"version":73,"cve_count":45,"kev_count":11,"has_kev":16},{"version":75,"cve_count":11,"kev_count":11,"has_kev":16},{"version":77,"cve_count":45,"kev_count":11,"has_kev":16},{"version":79,"cve_count":11,"kev_count":11,"has_kev":16},{"version":81,"cve_count":11,"kev_count":11,"has_kev":16},{"version":83,"cve_count":11,"kev_count":11,"has_kev":16},{"version":85,"cve_count":11,"kev_count":11,"has_kev":16},{"version":87,"cve_count":11,"kev_count":11,"has_kev":16},{"version":89,"cve_count":11,"kev_count":11,"has_kev":16},{"version":91,"cve_count":11,"kev_count":11,"has_kev":16},{"version":93,"cve_count":11,"kev_count":11,"has_kev":16},{"version":95,"cve_count":11,"kev_count":11,"has_kev":16},{"version":97,"cve_count":11,"kev_count":11,"has_kev":16},{"version":99,"cve_count":11,"kev_count":11,"has_kev":16},{"version":101,"cve_count":11,"kev_count":11,"has_kev":16},{"version":103,"cve_count":11,"kev_count":11,"has_kev":16},{"version":105,"cve_count":11,"kev_count":11,"has_kev":16},{"version":107,"cve_count":45,"kev_count":11,"has_kev":16},{"version":109,"cve_count":11,"kev_count":11,"has_kev":16},{"version":111,"cve_count":11,"kev_count":11,"has_kev":16},{"version":113,"cve_count":11,"kev_count":11,"has_kev":16},{"version":115,"cve_count":11,"kev_count":11,"has_kev":16},{"version":117,"cve_count":11,"kev_count":11,"has_kev":16},{"version":119,"cve_count":11,"kev_count":11,"has_kev":16},{"version":121,"cve_count":11,"kev_count":11,"has_kev":16},{"version":123,"cve_count":11,"kev_count":11,"has_kev":16},{"version":125,"cve_count":11,"kev_count":11,"has_kev":16},{"version":127,"cve_count":11,"kev_count":11,"has_kev":16},{"version":129,"cve_count":11,"kev_count":11,"has_kev":16},{"version":131,"cve_count":11,"kev_count":11,"has_kev":16},{"version":133,"cve_count":11,"kev_count":11,"has_kev":16},{"version":135,"cve_count":11,"kev_count":11,"has_kev":16},{"version":137,"cve_count":11,"kev_count":11,"has_kev":16},{"version":139,"cve_count":11,"kev_count":11,"has_kev":16},{"version":141,"cve_count":11,"kev_count":11,"has_kev":16},{"version":143,"cve_count":11,"kev_count":11,"has_kev":16},{"version":145,"cve_count":11,"kev_count":11,"has_kev":16},{"version":147,"cve_count":11,"kev_count":11,"has_kev":16},{"version":149,"cve_count":11,"kev_count":11,"has_kev":16},[220,228,234,240,245,252,257,264,270,275],{"cveId":221,"description":222,"publishedDate":223,"cvssScore":224,"cvssVersion":225,"severity":226,"isKev":16,"epssScore":227},"CVE-2018-1335","From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. The mitigation is to upgrade to Tika 1.18.","2018-04-25",8.1,"v3.0","High",0.93555,{"cveId":229,"description":230,"publishedDate":12,"cvssScore":231,"cvssVersion":232,"severity":226,"isKev":16,"epssScore":233},"CVE-2025-54988","Critical XXE in Apache Tika (tika-parser-pdf-module) in Apache Tika 1.13 through and including 3.2.1 on all platforms allows an attacker to carry out XML External Entity injection via a crafted XFA file inside of a PDF. An attacker may be able to read sensitive data or trigger malicious requests to internal resources or third-party servers. Note that the tika-parser-pdf-module is used as a dependency in several Tika packages including at least: tika-parsers-standard-modules, tika-parsers-standard-package, tika-app, tika-grpc and tika-server-standard.\n\nUsers are recommended to upgrade to version 3.2.2, which fixes this issue.",8.4,"v3.1",0.48518,{"cveId":235,"description":236,"publishedDate":237,"cvssScore":238,"cvssVersion":232,"severity":226,"isKev":16,"epssScore":239},"CVE-2021-33813","An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.","2021-06-16",7.5,0.19442,{"cveId":241,"description":242,"publishedDate":243,"cvssScore":238,"cvssVersion":225,"severity":226,"isKev":16,"epssScore":244},"CVE-2018-11761","In Apache Tika 0.1 to 1.18, the XML parsers were not configured to limit entity expansion. They were therefore vulnerable to an entity expansion vulnerability which can lead to a denial of service attack.","2018-09-19",0.0938,{"cveId":246,"description":247,"publishedDate":248,"cvssScore":249,"cvssVersion":232,"severity":250,"isKev":16,"epssScore":251},"CVE-2016-6809","Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization.","2017-04-06",9.8,"Critical",0.08025,{"cveId":253,"description":254,"publishedDate":255,"cvssScore":238,"cvssVersion":225,"severity":226,"isKev":16,"epssScore":256},"CVE-2018-11796","In Apache Tika 1.19 (CVE-2018-11761), we added an entity expansion limit for XML parsing. However, Tika reuses SAXParsers and calls reset() after each parse, which, for Xerces2 parsers, as per the documentation, removes the user-specified SecurityManager and thus removes entity expansion limits after the first parse. Apache Tika versions from 0.1 to 1.19 are therefore still vulnerable to entity expansions which can lead to a denial of service attack. Users should upgrade to 1.19.1 or later.","2018-10-09",0.07537,{"cveId":258,"description":259,"publishedDate":260,"cvssScore":261,"cvssVersion":225,"severity":262,"isKev":16,"epssScore":263},"CVE-2015-3271","Apache Tika server (aka tika-server) in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header.","2016-12-15",5.3,"Medium",0.06522,{"cveId":265,"description":266,"publishedDate":267,"cvssScore":268,"cvssVersion":225,"severity":262,"isKev":16,"epssScore":269},"CVE-2018-17197","A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika.","2018-12-24",6.5,0.06146,{"cveId":271,"description":272,"publishedDate":243,"cvssScore":273,"cvssVersion":225,"severity":262,"isKev":16,"epssScore":274},"CVE-2018-11762","In Apache Tika 0.9 to 1.18, in a rare edge case where a user does not specify an extract directory on the commandline (--extract-dir=) and the input file has an embedded file with an absolute path, such as \"C:\u002Fevil.bat\", tika-app would overwrite that file.",5.9,0.05449,{"cveId":276,"description":277,"publishedDate":278,"cvssScore":279,"cvssVersion":225,"severity":226,"isKev":16,"epssScore":280},"CVE-2019-10088","A carefully crafted or corrupt zip file can cause an OOM in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Users should upgrade to 1.22 or later.","2019-08-02",8.8,0.0484,[],{"title":283,"metaDescription":284,"keywords":285,"structuredData":286},"Tika by Apache - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Tika by Apache covering 67 versions with 24 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Tika vulnerabilities, Tika security, Tika CVE, Apache Tika, Tika threat intelligence, Apache security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":287,"@type":288,"name":289,"description":284,"url":290,"manufacturer":291,"applicationCategory":295,"softwareVersion":296,"mainEntity":297},"https:\u002F\u002Fschema.org","SoftwareApplication","Tika","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fapache\u002Ftika",{"@type":292,"name":293,"url":294},"Organization","Apache","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fapache","Security Software","67 versions tracked",{"@type":298,"name":299,"description":300,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Tika Security Vulnerabilities","Security vulnerabilities affecting Tika by Apache",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":302,"apiVersion":303},"2026-10-18T17:45:11.304Z","3.0",{"rows":305,"total":11,"capped":16,"failed":11},[],[]]