org.elasticsearch:elasticsearch-analysis-icu (0.18.4), org.elasticsearch:elasticsearch-cloud-aws (0.18.4) +11 more potentially affected by CVE-2024-43709 via org.elasticsearch:elasticsearch (0.18.4)

org.elasticsearch:elasticsearch MAVEN version 0.18.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.18.4 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.18.3), org.elasticsearch:elasticsearch-cloud-aws (0.18.3) +11 more potentially affected by CVE-2024-43709 via org.elasticsearch:elasticsearch (0.18.3)

org.elasticsearch:elasticsearch MAVEN version 0.18.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.18.3 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.7.1), org.elasticsearch:elasticsearch-client-groovy (0.7.1) +3 more potentially affected by CVE-2024-43709 via org.elasticsearch:elasticsearch (0.7.1)

org.elasticsearch:elasticsearch MAVEN version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.7.1 - org.elasticsearch:elasticsearch-client-groov...

org.elasticsearch:elasticsearch-analysis-icu (0.14.2), org.elasticsearch:elasticsearch-cloud-aws (0.14.2) +10 more potentially affected by CVE-2024-43709 via org.elasticsearch:elasticsearch (0.14.2)

org.elasticsearch:elasticsearch MAVEN version 0.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.14.2 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.14.1), org.elasticsearch:elasticsearch-cloud-aws (0.14.1) +10 more potentially affected by CVE-2024-43709 via org.elasticsearch:elasticsearch (0.14.1)

org.elasticsearch:elasticsearch MAVEN version 0.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.14.1 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.8.0), org.elasticsearch:elasticsearch-client-groovy (0.8.0) +4 more potentially affected by CVE-2024-43709 via org.elasticsearch:elasticsearch (0.8.0)

org.elasticsearch:elasticsearch MAVEN version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.8.0 - org.elasticsearch:elasticsearch-client-groov...

org.elasticsearch:elasticsearch-analysis-icu (0.16.4), org.elasticsearch:elasticsearch-cloud-aws (0.16.4) +11 more potentially affected by CVE-2024-43709 via org.elasticsearch:elasticsearch (0.16.4)

org.elasticsearch:elasticsearch MAVEN version 0.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.16.4 - org.elasticsearch:elasticsearch-cloud-aws...

com.aconex.scrutineer:scrutineer (1.0.0), org.elasticsearch:elasticsearch-analysis-icu (0.17.9) +12 more potentially affected by CVE-2024-43709 via org.elasticsearch:elasticsearch (0.17.9)

org.elasticsearch:elasticsearch MAVEN version 0.17.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.aconex.scrutineer:scrutineer 1.0.0 - org.elasticsearch:elasticsearch-analysis-icu 0.17.9 -...

org.elasticsearch:elasticsearch-analysis-icu (0.17.4), org.elasticsearch:elasticsearch-cloud-aws (0.17.4) +11 more potentially affected by CVE-2024-43709 via org.elasticsearch:elasticsearch (0.17.4)

org.elasticsearch:elasticsearch MAVEN version 0.17.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.17.4 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.17.1), org.elasticsearch:elasticsearch-cloud-aws (0.17.1) +11 more potentially affected by CVE-2024-43709 via org.elasticsearch:elasticsearch (0.17.1)

org.elasticsearch:elasticsearch MAVEN version 0.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.17.1 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-groovy (1.6.1) potentially affected by CVE-2024-43709 via org.elasticsearch:elasticsearch (1.6.1)

org.elasticsearch:elasticsearch MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-groovy 1.6.1 Source cves: CVE-2024-43709 Source advisory:...

PT-2025-1233

Name of the Vulnerable Software and Affected Versions SpagoBI version 3.5.1 Description The issue is related to the script input feature of SpagoBI, which allows arbitrary code execution. This is due to the lack of measures to neutralize special elements used in the command input field...

CVE-2024-12652

A Improper Control of Generation of Code 'Code Injection' vulnerability in groovy script function in SmartRobot′s Conversational AI Platform before v7.2.0 allows remote authenticated users to perform arbitrary system commands via Groovy code...

CVE-2024-12652 Intumit SmartRobot′s Conversational AI Platform - Improper Control of Generation of Code ('Code Injection')

A Improper Control of Generation of Code 'Code Injection' vulnerability in groovy script function in SmartRobot′s Conversational AI Platform before v7.2.0 allows remote authenticated users to perform arbitrary system commands via Groovy code...

CVE-2024-12652 Intumit SmartRobot′s Conversational AI Platform - Improper Control of Generation of Code ('Code Injection')

A Improper Control of Generation of Code 'Code Injection' vulnerability in groovy script function in SmartRobot′s Conversational AI Platform before v7.2.0 allows remote authenticated users to perform arbitrary system commands via Groovy code...

CVE-2024-12652

CVE-2024-12652 affects Intumit SmartRobot’s Conversational AI Platform. A vulnerability in the groovy script function prior to v7.2.0 enables remote authenticated users to execute arbitrary system commands via Groovy code (Code Injection). This can impact availability, confidentiality, and integr...

CVE-2024-12652: Improper Control of Generation of Code

A Improper Control of Generation of Code 'Code Injection' vulnerability in groovy script function in SmartRobot′s Conversational AI Platform before v7.2.0 allows remote authenticated users to perform arbitrary system commands via Groovy code...

Intumit SmartRobot Conversational AI Platform has security vulnerabilities

Intumit SmartRobot Conversational AI Platform is a conversational AI platform from Intumit. A security vulnerability previously existed in Intumit SmartRobot Conversational AI Platform version v7.2.0, which stemmed from an improper code generation control issue in Groovy script functions. An...

PT-2024-17692

Name of the Vulnerable Software and Affected Versions SmartRobot's Conversational AI Platform versions prior to 7.2.0 Description A Code Injection vulnerability exists in the groovy script function of SmartRobot's Conversational AI Platform, allowing remote authenticated users to perform arbitrar...

Liferay Portal 7.0.0 < 7.4.3.102 XSS

The Script Console in Liferay Portal 7.0.0 through 7.4.3.101, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, 7.2 GA through fix pack 20, 7.1 GA through fix pack 28, 7.0 GA through fix pack 102 and 6.2 GA through fix pack 173 does not sufficiently...