Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2014-0168

Jolokia: cross-site request forgery (CSRF)

Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.

CVSS 2.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Jolokia Redhat
Products
Jolokia Jboss Amq Jboss Fuse
CVE-2018-10899

jolokia: system-wide CSRF that could lead to Remote Code Execution

A flaw was found in Jolokia versions from 1.2 to before 1.6.1. Affected versions are vulnerable to a system-wide CSRF. This holds true for properly configured instances with strict checking for origin and referrer headers. This could result in a Remote Code Execution attack.

CVSS 3.0 · 8.1 High EPSS 2.7% KEV · Not listed
Vendors
Jolokia Redhat
Products
Jolokia Jboss Amq Jboss Fuse and 1 more
CVE-2018-1000130

jolokia: JMX proxy mode vulnerable to remote code execution

A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server.

CVSS 3.0 · 8.1 High EPSS 73.7% KEV · Not listed
Vendors
Jolokia Redhat
Products
Webarchive Agent Jboss Fuse
CVE-2018-1000129

jolokia: Cross site scripting in the HTTP servlet

An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser.

CVSS 3.0 · 6.1 Medium EPSS 24.7% KEV · Not listed
Vendors
Jolokia Redhat
Products
Jolokia Jboss Amq Jboss Fuse