Jakarta Expression Language CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2021-28170

jakarta-el: ELParserTokenManager enables invalid EL expressions to be evaluate

In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.

CVSS 3.1 · 5.3 Medium EPSS 2.1% KEV · Not listed

Vendors

Eclipse Oracle Quarkus and 1 more

Products

Jakarta Expression Language Communications Cloud Native Core Policy Weblogic Server and 9 more

Page 1 of 1.