326 matches found
GHSA-FG44-W3FR-HGXV Apache TomEE console vulnerable to Cross-site Scripting
The Apache TomEE console tomee-webapp has a XSS vulnerability which could allow javascript to be executed if the user is given a malicious URL. This web application is typically used to add TomEE features to a Tomcat installation. The TomEE bundles do not ship with this application included. This...
org.apache.openejb:apache-tomee (>=1.5.2, <=1.6.0), org.apache.openejb:arquillian-tomee-codi-tests (>=1.5.2, <=1.6.0) +9 more potentially affected by CVE-2013-4590 via org.apache.tomcat:tomcat (>=7.0.37, <=7.0.47)
org.apache.tomcat:tomcat MAVEN version =7.0.37, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =4.5.2, =5.16.3, =5.19.9 Source cves: CVE-2013-4590 Source advisory: OSV:GHSA-87W9-X2C3-HRJJ...
org.apache.openejb:apache-tomee (>=1.5.2, <=1.6.0), org.apache.openejb:arquillian-tomee-codi-tests (>=1.5.2, <=1.6.0) +9 more potentially affected by CVE-2014-0075 via org.apache.tomcat:tomcat (>=7.0.37, <=7.0.47)
org.apache.tomcat:tomcat MAVEN version =7.0.37, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =4.5.2, =5.16.3, =5.19.9 Source cves: CVE-2014-0075 Source advisory: OSV:GHSA-475F-74WP-PQV5...
org.apache.openejb:apache-tomee (>=1.5.2, <=1.6.0), org.apache.openejb:arquillian-tomee-codi-tests (>=1.5.2, <=1.6.0) +9 more potentially affected by CVE-2014-0075 via org.apache.tomcat:tomcat (>=7.0.37, <=7.0.47)
org.apache.tomcat:tomcat MAVEN version =7.0.37, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =4.5.2, =5.16.3, =5.19.9 Source cves: CVE-2014-0075 Source advisory: GHSA-475F-74WP-PQV5...
org.apache.openejb:apache-tomee (>=1.5.2, <=1.6.0.2), org.apache.openejb:arquillian-tomee-codi-tests (>=1.5.2, <=1.6.0.2) +9 more potentially affected by CVE-2014-0119 via org.apache.tomcat:tomcat (>=7.0.37, <=7.0.53)
org.apache.tomcat:tomcat MAVEN version =7.0.37, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =4.5.2, =5.16.3, =5.19.9 Source cves: CVE-2014-0119 Source advisory: OSV:GHSA-PRC3-7F44-W48J...
org.apache.openejb:apache-tomee (>=1.5.2, <=1.6.0.2), org.apache.openejb:arquillian-tomee-codi-tests (>=1.5.2, <=1.6.0.2) +9 more potentially affected by CVE-2014-0119 via org.apache.tomcat:tomcat (>=7.0.37, <=7.0.53)
org.apache.tomcat:tomcat MAVEN version =7.0.37, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =4.5.2, =5.16.3, =5.19.9 Source cves: CVE-2014-0119 Source advisory: GHSA-PRC3-7F44-W48J...
io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3), org.apache.openejb:apache-tomee (>=1.5.2, <=1.6.0.2) +10 more potentially affected by CVE-2014-0230 via org.apache.tomcat:tomcat (>=7.0.37, <=7.0.54)
org.apache.tomcat:tomcat MAVEN version =7.0.37, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =4.5.2, =5.16.3, =5.19.9 Source cves: CVE-2014-0230 Source advisory: OSV:GHSA-PXCX-CXQ8-4MMW...
io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3), org.apache.juddi:juddi-tomcat (>=3.3.1, <=3.3.4) +12 more potentially affected by CVE-2016-0714 via org.apache.tomcat:tomcat (>=7.0.37, <=7.0.68)
org.apache.tomcat:tomcat MAVEN version =7.0.37, =3.3.1, =3.3.1, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =4.5.2, =5.16.3, =5.19.9 Source cves: CVE-2016-0714 Source advisory: GHSA-MV42-PX54-87JW...
io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3), org.apache.juddi:juddi-tomcat (>=3.3.1, <=3.3.4) +12 more potentially affected by CVE-2016-0714 via org.apache.tomcat:tomcat (>=7.0.37, <=7.0.68)
org.apache.tomcat:tomcat MAVEN version =7.0.37, =3.3.1, =3.3.1, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =4.5.2, =5.16.3, =5.19.9 Source cves: CVE-2016-0714 Source advisory: OSV:GHSA-MV42-PX54-87JW...
org.apache.tomee:apache-tomee (>=7.0.0, <=7.0.2), org.apache.tomee:arquillian-tomee-codi-tests (>=7.0.0, <=7.0.2) +6 more potentially affected by CVE-2016-6817 via org.apache.tomcat:tomcat (>=8.5.2, <=8.5.6)
org.apache.tomcat:tomcat MAVEN version =8.5.2, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.2 Source cves: CVE-2016-6817 Source advisory: GHSA-698C-2X4J-G9GQ...
org.apache.tomee:apache-tomee (>=7.0.0, <=7.0.3), org.apache.tomee:arquillian-tomee-codi-tests (>=7.0.0, <=7.0.3) +6 more potentially affected by CVE-2017-5647 via org.apache.tomcat:tomcat (>=8.5.2, <=8.5.11)
org.apache.tomcat:tomcat MAVEN version =8.5.2, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.3 Source cves: CVE-2017-5647 Source advisory: GHSA-3GV7-3H64-78CM...
io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3), org.apache.juddi:juddi-tomcat (>=3.3.1, <=3.3.4) +12 more potentially affected by CVE-2017-5647 via org.apache.tomcat:tomcat (>=7.0.37, <=7.0.68)
org.apache.tomcat:tomcat MAVEN version =7.0.37, =3.3.1, =3.3.1, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =4.5.2, =5.16.3, =5.19.9 Source cves: CVE-2017-5647 Source advisory: GHSA-3GV7-3H64-78CM...
org.apache.tomee:apache-tomee (>=7.0.0, <=7.0.3), org.apache.tomee:arquillian-tomee-codi-tests (>=7.0.0, <=7.0.3) +6 more potentially affected by CVE-2017-5647 via org.apache.tomcat:tomcat (>=8.5.2, <=8.5.11)
org.apache.tomcat:tomcat MAVEN version =8.5.2, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.3 Source cves: CVE-2017-5647 Source advisory: OSV:GHSA-3GV7-3H64-78CM...
org.apache.tomee:apache-tomee (>=7.0.0, <=7.0.3), org.apache.tomee:arquillian-tomee-codi-tests (>=7.0.0, <=7.0.3) +7 more potentially affected by CVE-2017-7674 via org.apache.tomcat:tomcat (>=8.5.2, <=8.5.15)
org.apache.tomcat:tomcat MAVEN version =8.5.2, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.3 - org.openl.rules.demo:org.openl.rules.demo.demo 5.20.0 Source cves: CVE-2017-7674 Source advisory: GHSA-73RX-3F9R-X949...
org.apache.tomee:apache-tomee (7.0.4), org.apache.tomee:arquillian-tomee-codi-tests (7.0.4) +8 more potentially affected by CVE-2017-15706 via org.apache.tomcat:tomcat (>=8.5.20, <=8.5.23)
org.apache.tomcat:tomcat MAVEN version =8.5.20, =5.20.1, =5.20.4 Source cves: CVE-2017-15706 Source advisory: OSV:GHSA-372Q-33VH-8MPC...
org.apache.tomee:apache-tomee (>=7.0.0, <=7.0.3), org.apache.tomee:arquillian-tomee-codi-tests (>=7.0.0, <=7.0.3) +7 more potentially affected by CVE-2017-7674 via org.apache.tomcat:tomcat (>=8.5.2, <=8.5.15)
org.apache.tomcat:tomcat MAVEN version =8.5.2, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.3 - org.openl.rules.demo:org.openl.rules.demo.demo 5.20.0 Source cves: CVE-2017-7674 Source advisory: OSV:GHSA-73RX-3F9R-X949...
org.apache.tomee:apache-tomee (7.0.4), org.apache.tomee:arquillian-tomee-codi-tests (7.0.4) +8 more potentially affected by CVE-2017-15706 via org.apache.tomcat:tomcat (>=8.5.20, <=8.5.23)
org.apache.tomcat:tomcat MAVEN version =8.5.20, =5.20.1, =5.20.4 Source cves: CVE-2017-15706 Source advisory: GHSA-372Q-33VH-8MPC...
org.apache.tomee:apache-tomee (>=7.0.0, <=7.0.3), org.apache.tomee:arquillian-tomee-codi-tests (>=7.0.0, <=7.0.3) +7 more potentially affected by CVE-2017-7675 via org.apache.tomcat:tomcat (>=8.5.2, <=8.5.15)
org.apache.tomcat:tomcat MAVEN version =8.5.2, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.3 - org.openl.rules.demo:org.openl.rules.demo.demo 5.20.0 Source cves: CVE-2017-7675 Source advisory: GHSA-68G5-8Q7F-M384...
org.apache.tomee:apache-tomee (>=7.0.0, <=7.0.3), org.apache.tomee:arquillian-tomee-codi-tests (>=7.0.0, <=7.0.3) +7 more potentially affected by CVE-2017-7675 via org.apache.tomcat:tomcat (>=8.5.2, <=8.5.15)
org.apache.tomcat:tomcat MAVEN version =8.5.2, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.3 - org.openl.rules.demo:org.openl.rules.demo.demo 5.20.0 Source cves: CVE-2017-7675 Source advisory: OSV:GHSA-68G5-8Q7F-M384...
org.apache.tomee:apache-tomee (>=7.0.0, <=7.1.4), org.apache.tomee:arquillian-tomee-codi-tests (>=7.0.0, <=7.1.4) +8 more potentially affected by CVE-2022-25762 via org.apache.tomcat:tomcat (>=8.5.2, <=8.5.57)
org.apache.tomcat:tomcat MAVEN version =8.5.2, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =5.21.0, =5.20.0, =5.20.4 Source cves: CVE-2022-25762 Source advisory: OSV:GHSA-H3CH-5PP2-VH6W...