io.fabric8.examples:fabric-activemq-demo (1.2.0.redhat-133), io.fabric8.mq:camel-amq (1.2.0.redhat-133) +6 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.2.12.release)

org.springframework:spring-jms MAVEN version 3.2.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - io.fabric8.examples:fabric-activemq-demo 1.2.0.redhat-133 - io.fabric8.mq:camel-amq...

org.broadleafcommerce:broadleaf-admin-module (>=3.0.0-ga, <=3.0.2-ga), org.broadleafcommerce:broadleaf-common (>=3.0.0-ga, <=3.1.2-ga) +8 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.2.2.release)

org.springframework:spring-jms MAVEN version 3.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.broadleafcommerce:broadleaf-admin-module =3.0.0-ga, =3.0.0-ga, =3.0.0-ga, =3.0.0-ga,...

com.sitewhere:sitewhere-activemq (1.4.0), com.sitewhere:sitewhere-azure (1.4.0) +21 more potentially affected by CVE-2026-41841 via org.springframework:spring-webmvc (3.2.10.release)

org.springframework:spring-webmvc MAVEN version 3.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.sitewhere:sitewhere-activemq 1.4.0 - com.sitewhere:sitewhere-azure 1.4.0 -...

EUVD-2020-14039

Malware in sbrugna...

CVE-2020-21266

Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting XSS due to a slow HTTP post vulnerability...

Broadleaf Commerce 跨站脚本漏洞

Broadleaf Commerce is a Java open source e-commerce website framework from the Broadleaf Commerce team. A security vulnerability exists in Broadleaf Commerce versions 5.x and 6.x, which stems from cross-site scripting XSS in email address registration...

Broadleaf Commerce Cross-Site Scripting Vulnerability

Broadleaf Commerce is Broadleaf Commerce team of a Java open source e-commerce website framework. A cross-site scripting vulnerability exists in Broadleaf Commerce version 5.1.14-GA, which stems from a slow HTTP post vulnerability. An attacker can exploit this vulnerability to execute JavaScript...

CVE-2020-21266

Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting XSS due to a slow HTTP post vulnerability...

CVE-2020-21266

Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting XSS due to a slow HTTP post vulnerability...

Cross site scripting

Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting XSS due to a slow HTTP post vulnerability...

CVE-2020-21266

Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting XSS due to a slow HTTP post vulnerability...

CVE-2020-21266

Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting XSS due to a slow HTTP post vulnerability...

CVE-2020-21266

CVE-2020-21266 affects Broadleaf Commerce 5.1.14-GA and is caused by a slow HTTP POST that enables cross-site scripting (XSS) on the client. The impact is client-side script execution. A fix is referenced in Broadleaf release notes for 5.1.15-GA; upgrading to that version is the supported remedia...

PT-2020-15335

Name of the Vulnerable Software and Affected Versions Broadleaf Commerce version 5.1.14-GA Description The issue is related to cross-site scripting XSS due to a slow HTTP post vulnerability. Recommendations For version 5.1.14-GA, update to a version that includes a fix for this issue, as no...

CVE-2020-21266: Improper Neutralization of Input During Web Page Generation

Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting XSS due to a slow HTTP post vulnerability...