Vulnerabilities > Itextpdf > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-12-30 CVE-2017-20151 Unspecified vulnerability in Itextpdf Rups
A vulnerability classified as problematic was found in iText RUPS.
network
low complexity
itextpdf
critical
9.8
2021-12-15 CVE-2021-43113 Command Injection vulnerability in multiple products
iTextPDF in iText 7 and up to (excluding 4.4.13.3) 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs (aka Ghostscript) command line in GhostscriptHelper.java.
network
low complexity
itextpdf debian CWE-77
critical
9.8