CVE-2021-26291

🗓️ 23 Apr 2021 14:20:13Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 283 Views

Apache Maven security vulnerability in following non-SSL repositories. Details at referenced URLs

Reporter	Title	Published	Views	Family All 91
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.5	30 Apr 202418:52	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to security restriction bypass due to the Apache Maven package (CVE-2021-26291)	28 May 202515:04	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Netezza Analytics - NPS	11 Jul 202511:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus for z/OS is vulnerable to a remote attack due to Apache Maven (CVE-2021-26291)	21 Aug 202417:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.2	18 Jun 202414:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2023	1 Sep 202319:56	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Maven affect IBM watsonx.data	18 Sep 202419:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Apache Maven (CVE-2021-26291)	31 Jan 202521:38	–	ibm
FreeBSD	Apache Maven -- multiple vulnerabilities	4 Apr 202100:00	–	freebsd
GithubExploit	osv-java-poc	28 May 202608:38	–	githubexploit

NVD

Vulners

Node

apache mavenRange<3.8.1

Node

quarkus quarkusRange<1.13.5

Node

oracle financial_services_analytical_applications_infrastructureRange8.0.6.0.0–8.0.9.0.0

oracle financial_services_analytical_applications_infrastructureRange8.1.0.0.0–8.1.2.0

oracle goldengate_big_data_and_application_adaptersMatch23.1

[
  {
    "product": "Apache Maven",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "3.8.1",
        "status": "affected",
        "version": "Apache Maven",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread.html/rfc0db1f3c375087e69a239f9284ded72d04fbb55849eadde58fa9dc2%40%3Cissues.karaf.apache.org%3E
lists	www.lists.apache.org/thread.html/r0a5e4ff2a7ca7ad8595d7683afbaeb3b8788ba974681907f97e7dc8e%40%3Cjira.kafka.apache.org%3E
lists	www.lists.apache.org/thread.html/red3bf6cbfd99e36b0c0a4fa1cea1eef1eb300c6bd8f372f497341265%40%3Cdev.kafka.apache.org%3E
lists	www.lists.apache.org/thread.html/r78fb6d2cf0ca332cfa43abd4471e75fa6c517ed9cdfcb950bff48d40%40%3Cjira.kafka.apache.org%3E
lists	www.lists.apache.org/thread.html/rc7ae2530063d1cd1cf8e9fa130d10940760f927168d4063d23b8cd0a%40%3Ccommits.kafka.apache.org%3E
oracle	www.oracle.com/security-alerts/cpujul2022.html
lists	www.lists.apache.org/thread.html/rcd6c3a36f1dbc130da1b89d0f320db7040de71661a512695a8d513ac%40%3Cdev.kafka.apache.org%3E
oracle	www.oracle.com/security-alerts/cpuapr2022.html
lists	www.lists.apache.org/thread.html/r53cd5de57aaa126038c5301d8f518f3defab3c5b1c7e17c97bad08d8%40%3Cissues.karaf.apache.org%3E
lists	www.lists.apache.org/thread.html/r5ae6aaa8a2ce86145225c3516bb45d315c0454e3765d651527e5df8a%40%3Ccommits.kafka.apache.org%3E

21 Nov 2024 05:56Current

8.2High risk

Vulners AI Score8.2

CVSS 26.4

CVSS 3.19.1

EPSS0.46101

CWE-346