Lucene search
+L

8 matches found

Tenable Nessus
Tenable Nessus
added 2024/05/11 12:00 a.m.28 views

RHEL 7 : codehaus-plexus (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - codehaus-plexus: Directory Traversal CVE-2022-4244 - A flaw was found in codehaus-plexus. The...

6.1AI score0.01347EPSS
SaveExploits0References2
Circl
Circl
added 2023/09/26 12:34 a.m.12 views

CVE-2022-4245

creationtimestamp| type| source ---|---|--- 2023-09-26 00:34:27+00:00| seen| https://t.me/cibsecurity/71014...

4.3CVSS5.3AI score0.00694EPSS
SaveExploits0References1
NVD
NVD
added 2023/09/25 8:15 p.m.31 views

CVE-2022-4245

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

4.3CVSS4.7AI score0.00694EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2023/09/25 8:15 p.m.32 views

CVE-2022-4245

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

4.3CVSS6.2AI score0.00694EPSS
SaveExploits0References4
OSV
OSV
added 2023/09/25 8:15 p.m.10 views

UBUNTU-CVE-2022-4245

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

4.3CVSS7.2AI score0.00694EPSS
SaveExploits0References5
OSV
OSV
added 2023/09/25 7:20 p.m.15 views

CVE-2022-4245 Codehaus-plexus: xml external entity (xxe) injection

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

4.3CVSS5.9AI score
SaveExploits0References8
CVE
CVE
added 2023/09/25 7:20 p.m.365 views

CVE-2022-4245

CVE-2022-4245 concerns a flaw in codehaus-plexus where, in XmlWriterUtil, the method writeComment fails to sanitize a --> sequence. This allows text in a command string to be interpreted as XML, enabling XML injection. The available connected documents consistently describe this vulnerability...

4.3CVSS4.9AI score0.00694EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2023/09/25 7:20 p.m.31 views

CVE-2022-4245 Codehaus-plexus: xml external entity (xxe) injection

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

4.3CVSS5.1AI score0.00694EPSS
SaveExploits0References4
Rows per page
Query Builder