com.mysema.web:webmin (0.2.3), org.jumpmind.symmetric:symmetric-ds (1.3.2) +17 more potentially affected by CVE-2024-38820 via org.springframework:spring-web (2.0.7)

org.springframework:spring-web MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.mysema.web:webmin 0.2.3 - org.jumpmind.symmetric:symmetric-ds 1.3.2 - org.parancoe:parancoe 0.3...

com.mysema.web:webmin (0.2.3), org.jumpmind.symmetric:symmetric-ds (1.3.2) +17 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (2.0.7)

org.springframework:spring-web MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.mysema.web:webmin 0.2.3 - org.jumpmind.symmetric:symmetric-ds 1.3.2 - org.parancoe:parancoe 0.3...

com.mysema.web:webmin (0.2.3), org.jumpmind.symmetric:symmetric-ds (1.3.2) +17 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (2.0.7)

org.springframework:spring-web MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.mysema.web:webmin 0.2.3 - org.jumpmind.symmetric:symmetric-ds 1.3.2 - org.parancoe:parancoe 0.3...

com.mysema.web:webmin (0.2.3), org.jumpmind.symmetric:symmetric-ds (1.3.2) +17 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (2.0.7)

org.springframework:spring-web MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.mysema.web:webmin 0.2.3 - org.jumpmind.symmetric:symmetric-ds 1.3.2 - org.parancoe:parancoe 0.3...

org.jumpmind.symmetric:symmetric-core (>=2.2.0, <=2.5.13), org.jumpmind.symmetric:symmetric-ds (>=2.1.0, <=2.1.3) +1 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.2.140)

com.h2database:h2 MAVEN version 1.2.140 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - org.jumpmind.symmetric:symmetric-core =2.2.0, =2.1.0, =2.2.0, =2.5.13 Source cves: CVE-2022-23221 Source advisory:...

CVE-2020-24231

Symmetric DS 3.12.0 uses mx4j to provide access to JMX over HTTP. mx4j, by default, has no auth and is available on all interfaces. An attacker can interact with JMX: get system info, and invoke MBean methods. It is possible to install additional MBeans from a remote host using MLet that leads to...

Code injection

Symmetric DS 3.12.0 uses mx4j to provide access to JMX over HTTP. mx4j, by default, has no auth and is available on all interfaces. An attacker can interact with JMX: get system info, and invoke MBean methods. It is possible to install additional MBeans from a remote host using MLet that leads to...

CVE-2020-24231

CVE-2020-24231 affects Symmetric DS

CVE-2020-24231

Symmetric DS 3.12.0 uses mx4j to provide access to JMX over HTTP. mx4j, by default, has no auth and is available on all interfaces. An attacker can interact with JMX: get system info, and invoke MBean methods. It is possible to install additional MBeans from a remote host using MLet that leads to...

PT-2020-15668

Name of the Vulnerable Software and Affected Versions Symmetric DS versions prior to 3.12.0 Description The issue allows an attacker to interact with JMX, which can lead to arbitrary code execution. This is possible because mx4j, used by Symmetric DS to provide access to JMX over HTTP, has no...

CVE-2020-24231: Undefined Security Weakness

Symmetric DS 3.12.0 uses mx4j to provide access to JMX over HTTP. mx4j, by default, has no auth and is available on all interfaces. An attacker can interact with JMX: get system info, and invoke MBean methods. It is possible to install additional MBeans from a remote host using MLet that leads to...