CVE-2020-11969

If Apache TomEE is configured to use the embedded ActiveMQ broker, and the broker URI includes the useJMX=true parameter, a JMX port is opened on TCP port 1099, which does not include authentication. This affects Apache TomEE 8.0.0-M1 - 8.0.1, Apache TomEE 7.1.0 - 7.1.2, Apache TomEE 7.0.0-M1 -...

CVE-2020-11969

If Apache TomEE is configured to use the embedded ActiveMQ broker, and the broker URI includes the useJMX=true parameter, a JMX port is opened on TCP port 1099, which does not include authentication. This affects Apache TomEE 8.0.0-M1 - 8.0.1, Apache TomEE 7.1.0 - 7.1.2, Apache TomEE 7.0.0-M1 -...

Authentication flaw

If Apache TomEE is configured to use the embedded ActiveMQ broker, and the broker URI includes the useJMX=true parameter, a JMX port is opened on TCP port 1099, which does not include authentication. This affects Apache TomEE 8.0.0-M1 - 8.0.1, Apache TomEE 7.1.0 - 7.1.2, Apache TomEE 7.0.0-M1 -...

CVE-2020-11969

If Apache TomEE is configured to use the embedded ActiveMQ broker, and the broker URI includes the useJMX=true parameter, a JMX port is opened on TCP port 1099, which does not include authentication. This affects Apache TomEE 8.0.0-M1 - 8.0.1, Apache TomEE 7.1.0 - 7.1.2, Apache TomEE 7.0.0-M1 -...

CVE-2020-11969

CVE-2020-11969 concerns Apache TomEE when configured with the embedded ActiveMQ broker and broker URI includes useJMX=true, which opens a JMX port on TCP 1099 without authentication. Affected versions: TomEE 8.0.0-M1 through 8.0.1; 7.1.0 through 7.1.2; 7.0.0-M1 through 7.0.7; 1.0.0 through 1.7.5....

CVE-2020-11969

If Apache TomEE is configured to use the embedded ActiveMQ broker, and the broker URI includes the useJMX=true parameter, a JMX port is opened on TCP port 1099, which does not include authentication. This affects Apache TomEE 8.0.0-M1 - 8.0.1, Apache TomEE 7.1.0 - 7.1.2, Apache TomEE 7.0.0-M1 -...

CVE-2020-11969: Missing Authentication for Critical Function

If Apache TomEE is configured to use the embedded ActiveMQ broker, and the broker URI includes the useJMX=true parameter, a JMX port is opened on TCP port 1099, which does not include authentication. This affects Apache TomEE 8.0.0-M1 - 8.0.1, Apache TomEE 7.1.0 - 7.1.2, Apache TomEE 7.0.0-M1 -...

PT-2020-5914

Name of the Vulnerable Software and Affected Versions: Apache TomEE versions 1.0.0 through 1.7.5 Apache TomEE versions 7.0.0-M1 through 7.0.7 Apache TomEE versions 7.1.0 through 7.1.2 Apache TomEE versions 8.0.0-M1 through 8.0.1 Description: The issue is related to authentication errors in the...

org.apache.tomee:apache-tomee (>=7.0.7, <=7.1.2), org.apache.tomee:arquillian-tomee-codi-tests (>=7.0.7, <=7.1.2) +6 more potentially affected by CVE-2019-17569 via org.apache.tomcat:tomcat (8.5.50)

org.apache.tomcat:tomcat MAVEN version 8.5.50 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.apache.tomee:apache-tomee =7.0.7, =7.0.7, =7.0.7, =7.0.7, =7.0.7, =7.0.7, =7.0.7, =7.0.7, =7.1.2 Source...

org.apache.tomee:apache-tomee (>=7.0.7, <=7.1.2), org.apache.tomee:arquillian-tomee-codi-tests (>=7.0.7, <=7.1.2) +6 more potentially affected by CVE-2019-17569 via org.apache.tomcat:tomcat (8.5.50)

org.apache.tomcat:tomcat MAVEN version 8.5.50 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.apache.tomee:apache-tomee =7.0.7, =7.0.7, =7.0.7, =7.0.7, =7.0.7, =7.0.7, =7.0.7, =7.0.7, =7.1.2 Source...

org.apache.juddi:juddi-tomcat (>=3.3.6, <=3.3.7), org.apache.juddi:uddi-tck (>=3.3.6, <=3.3.7) +9 more potentially affected by CVE-2020-1935 via org.apache.tomcat:tomcat (>=9.0.10, <=9.0.30)

org.apache.tomcat:tomcat MAVEN version =9.0.10, =3.3.6, =3.3.6, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =5.22.2, =5.23.5.1 Source cves: CVE-2020-1935 Source advisory: OSV:GHSA-QXF4-CHVG-4R8R...

org.apache.tomee:apache-tomee (>=7.0.0, <=7.1.0), org.apache.tomee:arquillian-tomee-codi-tests (>=7.0.0, <=7.1.0) +8 more potentially affected by CVE-2019-0221 via org.apache.tomcat:tomcat (>=8.5.2, <=8.5.32)

org.apache.tomcat:tomcat MAVEN version =8.5.2, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =5.21.0, =5.20.0, =5.20.4 Source cves: CVE-2019-0221 Source advisory: GHSA-JJPQ-GP5Q-8Q6W...

org.apache.tomee:apache-tomee (>=7.0.0, <=7.1.0), org.apache.tomee:arquillian-tomee-codi-tests (>=7.0.0, <=7.1.0) +8 more potentially affected by CVE-2019-0221 via org.apache.tomcat:tomcat (>=8.5.2, <=8.5.32)

org.apache.tomcat:tomcat MAVEN version =8.5.2, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =5.21.0, =5.20.0, =5.20.4 Source cves: CVE-2019-0221 Source advisory: OSV:GHSA-JJPQ-GP5Q-8Q6W...

io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3), org.apache.juddi:juddi-tomcat (>=3.3.1, <=3.3.5) +12 more potentially affected by CVE-2019-0221 via org.apache.tomcat:tomcat (>=7.0.37, <=7.0.82)

org.apache.tomcat:tomcat MAVEN version =7.0.37, =3.3.1, =3.3.1, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =4.5.2, =5.16.3, =5.19.9 Source cves: CVE-2019-0221 Source advisory: OSV:GHSA-JJPQ-GP5Q-8Q6W...

org.apache.juddi:juddi-tomcat (3.3.6), org.apache.juddi:uddi-tck (3.3.6) +8 more potentially affected by CVE-2019-0221 via org.apache.tomcat:tomcat (>=9.0.10, <=9.0.12)

org.apache.tomcat:tomcat MAVEN version =9.0.10, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m2 Source cves: CVE-2019-0221 Source advisory: OSV:GHSA-JJPQ-GP5Q-8Q6W...

org.apache.openejb:apache-tomee (>=1.5.2, <=1.6.0), org.apache.openejb:arquillian-tomee-codi-tests (>=1.5.2, <=1.6.0) +9 more potentially affected by CVE-2014-0050 via org.apache.tomcat:tomcat (>=7.0.37, <=7.0.47)

org.apache.tomcat:tomcat MAVEN version =7.0.37, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =4.5.2, =5.16.3, =5.19.9 Source cves: CVE-2014-0050 Source advisory: OSV:GHSA-XX68-JFCG-XMMF...

Apache TomEE console cross-site scripting vulnerability

Apache TomEE is the United States Apache Apache Software Foundation of a Java EE server . Apache TomEE console tomee-webapp is one of the console program . A cross-site scripting vulnerability exists in Apache TomEE console tomee-webapp. A remote attacker can exploit this vulnerability to execute...

Apache TomEE console (tomee-webapp) XSS Vulnerability

Apache TomEE is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tomee";...

CVE-2018-8031

The Apache TomEE console tomee-webapp has a XSS vulnerability which could allow javascript to be executed if the user is given a malicious URL. This web application is typically used to add TomEE features to a Tomcat installation. The TomEE bundles do not ship with this application included. This...

Design/Logic Flaw

The Apache TomEE console tomee-webapp has a XSS vulnerability which could allow javascript to be executed if the user is given a malicious URL. This web application is typically used to add TomEE features to a Tomcat installation. The TomEE bundles do not ship with this application included. This...