Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 199

Export CSV
CVE-2023-22602

Apache Shiro before 1.11.0, when used with Spring Boot 2.6+, may allow authentication bypass through a specially crafted HTTP request

When using Apache Shiro before 1.11.0 together with Spring Boot 2.6+, a specially crafted HTTP request may cause an authentication bypass. The authentication bypass occurs when Shiro and Spring Boot are using different pattern-matching techniques. Both Shiro and Spring Boot < 2.6 default to Ant style pattern matching. Mitigation: Update to Apache Shiro 1.11.0, or set the following Spring Boot configuration value: `spring.mvc.pathmatch.matching-strategy = ant_path_matcher`

CVSS 3.1 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Apache Redhat Vmware
Products
Shiro Camel Spring Boot Jboss Fuse and 1 more
CVE-2022-42890

Apache Batik prior to 1.16 allows RCE via scripting

A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.

CVSS 3.1 · 7.5 High EPSS 3.4% KEV · Not listed
Vendors
Apache Debian Redhat
Products
Batik Debian Linux Camel Spring Boot and 1 more
CVE-2022-42889

Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "${prefix:name}", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation. Starting with version 1.5 and continuing through 1.9, the set of default Lookup instances included interpolators that could result in arbitrary code execution or contact with remote servers. These lookups are: - "script" - execute expressions using the JVM script execution engine (javax.script) - "dns" - resolve dns records - "url" - load values from urls, including from remote servers Applications using the interpolation defaults in the affected versions may be vulnerable to remote code execution or unintentional contact with remote servers if untrusted configuration values are used. Users are recommended to upgrade to Apache Commons Text 1.10.0, which disables the problematic interpolators by default.

CVSS 3.1 · 9.8 Critical EPSS 99.9% KEV · Not listed
Vendors
Apache Juniper Netapp and 1 more
Products
Commons Text Jsa1500 Jsa3500 and 18 more
CVE-2021-38153

Timing Attack Vulnerability for Apache Kafka Connect and Clients

Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful. Users should upgrade to 2.8.1 or higher, or 3.0.0 or higher where this vulnerability has been fixed. The affected versions include Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, 2.2.2, 2.3.0, 2.3.1, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.6.0, 2.6.1, 2.6.2, 2.7.0, 2.7.1, and 2.8.0.

CVSS 3.1 · 5.9 Medium EPSS 6.2% KEV · Not listed
Vendors
Apache Oracle Quarkus and 1 more
Products
Kafka Communications Brm - Elastic Charging Engine Communications Cloud Native Core Policy and 12 more
CVE-2021-30129

DoS/OOM leak vulnerability in Apache Mina SSHD Server

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0

CVSS 3.1 · 6.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Apache Oracle Redhat
Products
Sshd Banking Payments Banking Trade Finance and 10 more
CVE-2021-28163

jetty: Symlink directory exposes webapp directory contents

In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory is deployed as a static webapp, inadvertently serving the webapps themselves and anything else that might be in that directory.

CVSS 3.1 · 2.7 Low EPSS 4.2% KEV · Not listed
Vendors
Apache Eclipse Fedoraproject and 3 more
Products
Ignite Solr Jetty and 27 more
CVE-2021-26291

block repositories using http by default

Apache Maven will follow repositories that are defined in a dependency’s Project Object Model (pom) which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that repository. Maven is changing the default behavior in 3.8.1+ to no longer follow http (non-SSL) repository references by default. More details available in the referenced urls. If you are currently using a repository manager to govern the repositories used by your builds, you are unaffected by the risks present in the legacy behavior, and are unaffected by this vulnerability and change to default behavior. See this link for more information about repository management: https://maven.apache.org/repository-management.html

CVSS 3.1 · 9.1 Critical EPSS 8.7% KEV · Not listed
Vendors
Apache Oracle Quarkus and 1 more
Products
Maven Financial Services Analytical Applications Infrastructure Goldengate Big Data And Application Adapters and 6 more
CVE-2020-5529

htmlunit: malicious JavaScript code leads to arbitrary java code execution

HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specific initialization of Rhino engine is done in an improper way, hence a malicious JavaScript code can execute arbitrary Java code on the application.

CVSS 3.1 · 8.1 High EPSS 4.7% KEV · Not listed
Vendors
Apache Canonical Debian and 1 more
Products
Camel Ubuntu Linux Debian Linux and 1 more
CVE-2020-27218

jetty: buffer not correctly recycled in Gzip Request inflation

In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request with a body that is received entirely but not consumed by the application, then a subsequent request on the same connection will see that body prepended to its body. The attacker will not see any data but may inject data into the body of the subsequent request.

CVSS 3.1 · 4.8 Medium EPSS 8.3% KEV · Not listed
Vendors
Apache Debian Eclipse and 3 more
Products
Kafka Spark Debian Linux and 20 more
CVE-2020-13920

activemq: improper authentication allows MITM attack

Apache ActiveMQ uses LocateRegistry.createRegistry() to create the JMX RMI registry and binds the server to the "jmxrmi" entry. It is possible to connect to the registry without authentication and call the rebind method to rebind jmxrmi to something else. If an attacker creates another server to proxy the original, and bound that, he effectively becomes a man in the middle and is able to intercept the credentials when an user connects. Upgrade to Apache ActiveMQ 5.15.12.

CVSS 3.1 · 5.9 Medium EPSS 4.5% KEV · Not listed
Vendors
Apache Debian Oracle and 1 more
Products
Activemq Debian Linux Communications Diameter Signaling Router and 4 more
CVE-2020-11973

camel: Netty enables Java deserialization by default which could leed to remote code execution

Apache Camel Netty enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should upgrade to 2.25.1, 3.x users should upgrade to 3.2.0.

CVSS 3.1 · 9.8 Critical EPSS 6.8% KEV · Not listed
Vendors
Apache Oracle Redhat
Products
Camel Communications Diameter Signaling Router Enterprise Manager Base Platform and 2 more
CVE-2020-11972

camel: RabbitMQ enables Java deserialization by default which could leed to remote code execution

Apache Camel RabbitMQ enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should upgrade to 2.25.1, 3.x users should upgrade to 3.2.0.

CVSS 3.1 · 9.8 Critical EPSS 5.7% KEV · Not listed
Vendors
Apache Oracle Redhat
Products
Camel Communications Diameter Signaling Router Enterprise Manager Base Platform and 2 more
CVE-2019-0194

camel: Directory traversal in file producer

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x (2.19 and earlier) versions may be also affected.

CVSS 3.0 · 7.5 High EPSS 8.5% KEV · Not listed
Vendors
Apache Redhat
Products
Camel Jboss Fuse
CVE-2019-0188

camel-xmljson: XML external entity injection vulnerability inoutdated JSON-lib library

Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed.

CVSS 3.1 · 7.5 High EPSS 9.8% KEV · Not listed
Vendors
Apache Oracle
Products
Camel Enterprise Data Quality Enterprise Manager Base Platform and 2 more
CVE-2018-8041

camel-mail: path traversal vulnerability

Apache Camel's Mail 2.20.0 through 2.20.3, 2.21.0 through 2.21.1 and 2.22.0 is vulnerable to path traversal.

CVSS 3.0 · 5.3 Medium EPSS 9.6% KEV · Not listed
Vendors
Apache Redhat
Products
Camel Jboss Fuse
CVE-2018-8027

camel-core: XXE in XSD validation processor

Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to XXE in XSD validation processor.

CVSS 3.0 · 9.8 Critical EPSS 5.4% KEV · Not listed
Vendors
Apache
Products
Camel