CVE-2021-37578

Apache jUDDI uses several classes related to Java's Remote Method Invocation RMI which as an extension to UDDI provides an alternate transport for accessing UDDI services. RMI uses the default Java serialization mechanism to pass parameters in RMI invocations. A remote attacker can send a malicio...

K89010078: Apache vulnerabilities CVE-2018-1307, CVE-2018-1298, CVE-2018-1299, CVE-2018-1287, and CVE-2018-1297

Security Advisory Description CVE-2018-1307 In Apache jUDDI 3.2 through 3.3.4, if using the WADL2Java or WSDL2Java classes, which parse a local or remote XML document and then mediates the data structures into UDDI data structures, there are little protections present against entity expansion and...

io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3), org.apache.juddi:juddi-tomcat (>=3.3.1, <=3.3.4) +12 more potentially affected by CVE-2015-5351 via org.apache.tomcat:tomcat (>=7.0.37, <=7.0.64)

org.apache.tomcat:tomcat MAVEN version =7.0.37, =3.3.1, =3.3.1, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =4.5.2, =5.16.3, =5.19.9 Source cves: CVE-2015-5351 Source advisory: GHSA-W7CG-5969-678W...

io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3), org.apache.juddi:juddi-tomcat (>=3.3.1, <=3.3.4) +12 more potentially affected by CVE-2016-0714 via org.apache.tomcat:tomcat (>=7.0.37, <=7.0.68)

org.apache.tomcat:tomcat MAVEN version =7.0.37, =3.3.1, =3.3.1, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =4.5.2, =5.16.3, =5.19.9 Source cves: CVE-2016-0714 Source advisory: OSV:GHSA-MV42-PX54-87JW...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.35), org.apache.juddi:juddi-tomcat (>=3.3.6, <=3.3.8) +10 more potentially affected by CVE-2020-13934 via org.apache.tomcat:tomcat (>=9.0.10, <=9.0.35)

org.apache.tomcat:tomcat MAVEN version =9.0.10, =9.0.31, =3.3.6, =3.3.6, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =5.22.2, =5.23.5.1 Source cves: CVE-2020-13934 Source advisory: OSV:GHSA-VF77-8H7G-GGHP...

org.apache.juddi:juddi-tomcat (>=3.3.1, <=3.3.4), org.apache.juddi:uddi-tck (>=3.3.1, <=3.3.4) potentially affected by CVE-2022-23181 via org.apache.tomcat:tomcat (7.0.64)

org.apache.tomcat:tomcat MAVEN version 7.0.64 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.apache.juddi:juddi-tomcat =3.3.1, =3.3.1, =3.3.4 Source cves: CVE-2022-23181 Source advisory:...

org.apache.juddi:juddi-tomcat (3.3.5), org.apache.juddi:uddi-tck (3.3.5) potentially affected by CVE-2022-23181 via org.apache.tomcat:tomcat (7.0.82)

org.apache.tomcat:tomcat MAVEN version 7.0.82 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.apache.juddi:juddi-tomcat 3.3.5 - org.apache.juddi:uddi-tck 3.3.5 Source cves: CVE-2022-23181 Source...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.43), org.apache.juddi:juddi-tomcat (>=3.3.6, <=3.3.10) +10 more potentially affected by CVE-2021-41079 via org.apache.tomcat:tomcat (>=9.0.10, <=9.0.43)

org.apache.tomcat:tomcat MAVEN version =9.0.10, =9.0.31, =3.3.6, =3.3.6, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =5.22.2, =5.24.1 Source cves: CVE-2021-41079 Source advisory: GHSA-59G9-7GFX-C72P...

Apache jUDDI Code Execution

The vulnerability of the Apache jUDDI software lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

org.apache.juddi:juddi-tomcat (>=3.3.1, <=3.3.4), org.apache.juddi:uddi-tck (>=3.3.1, <=3.3.4) potentially affected by CVE-2021-30639 via org.apache.tomcat:tomcat (7.0.64)

org.apache.tomcat:tomcat MAVEN version 7.0.64 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.apache.juddi:juddi-tomcat =3.3.1, =3.3.1, =3.3.4 Source cves: CVE-2021-30639 Source advisory:...

Deserialization of Untrusted Data in Apache jUDDI

Apache jUDDI uses several classes related to Java's Remote Method Invocation RMI which as an extension to UDDI provides an alternate transport for accessing UDDI services. RMI uses the default Java serialization mechanism to pass parameters in RMI invocations. A remote attacker can send a malicio...

GHSA-9HX8-2MRV-R674 Deserialization of Untrusted Data in Apache jUDDI

Apache jUDDI uses several classes related to Java's Remote Method Invocation RMI which as an extension to UDDI provides an alternate transport for accessing UDDI services. RMI uses the default Java serialization mechanism to pass parameters in RMI invocations. A remote attacker can send a malicio...

Apache jUDDI code issue vulnerability

Apache jUDDI is a java implementation of UDDI open source package that serves WebServices. jUDDI versions prior to Apache jUDDI 3.3.10 have a code issue vulnerability that can be exploited by attackers to remotely run arbitrary code...

CVE-2021-37578

Apache jUDDI uses several classes related to Java's Remote Method Invocation RMI which as an extension to UDDI provides an alternate transport for accessing UDDI services. RMI uses the default Java serialization mechanism to pass parameters in RMI invocations. A remote attacker can send a malicio...

CVE-2021-37578

Apache jUDDI uses several classes related to Java's Remote Method Invocation RMI which as an extension to UDDI provides an alternate transport for accessing UDDI services. RMI uses the default Java serialization mechanism to pass parameters in RMI invocations. A remote attacker can send a malicio...

CVE-2021-37578

Apache jUDDI uses several classes related to Java's Remote Method Invocation RMI which as an extension to UDDI provides an alternate transport for accessing UDDI services. RMI uses the default Java serialization mechanism to pass parameters in RMI invocations. A remote attacker can send a malicio...

Design/Logic Flaw

Apache jUDDI uses several classes related to Java's Remote Method Invocation RMI which as an extension to UDDI provides an alternate transport for accessing UDDI services. RMI uses the default Java serialization mechanism to pass parameters in RMI invocations. A remote attacker can send a malicio...

CVE-2021-37578

Apache jUDDI uses several classes related to Java's Remote Method Invocation RMI which as an extension to UDDI provides an alternate transport for accessing UDDI services. RMI uses the default Java serialization mechanism to pass parameters in RMI invocations. A remote attacker can send a malicio...

CVE-2021-37578 Remote code execution via RMI

Apache jUDDI uses several classes related to Java's Remote Method Invocation RMI which as an extension to UDDI provides an alternate transport for accessing UDDI services. RMI uses the default Java serialization mechanism to pass parameters in RMI invocations. A remote attacker can send a malicio...

CVE-2021-37578

Apache jUDDI prior to 3.3.10 exposed a deserialization-based remote code execution vector via RMI. The issue arises from Java serialization in RMI entries, potentially allowing remote code execution if exploited. RMI is disabled by default for jUDDI web services/clients, and starting with 3.3.10 ...