com.cedarsoft.commons:rmi (>=1.6.1, <=1.6.3), org.appfuse:appfuse-spring (2.0.1) +7 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (2.5)

org.springframework:spring-webmvc MAVEN version 2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.cedarsoft.commons:rmi =1.6.1, =2.0.3, =2.0.3, =2.0.4 -...

com.cedarsoft.commons:rmi (>=1.6.1, <=1.6.3), org.appfuse:appfuse-spring (2.0.1) +7 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (2.5)

org.springframework:spring-webmvc MAVEN version 2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.cedarsoft.commons:rmi =1.6.1, =2.0.3, =2.0.3, =2.0.4 -...

com.cedarsoft.commons:rmi (>=1.6.1, <=1.6.3), org.appfuse:appfuse-spring (2.0.1) +7 more potentially affected by CVE-2026-22741 via org.springframework:spring-webmvc (2.5)

org.springframework:spring-webmvc MAVEN version 2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.cedarsoft.commons:rmi =1.6.1, =2.0.3, =2.0.3, =2.0.4 -...

EUVD-2007-5260

Malware in sbrugna...

com.cedarsoft.commons:rmi (>=1.6.1, <=1.6.3), org.appfuse:appfuse-spring (2.0.1) +7 more potentially affected by CVE-2024-38819 via org.springframework:spring-webmvc (2.5)

org.springframework:spring-webmvc MAVEN version 2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.cedarsoft.commons:rmi =1.6.1, =2.0.3, =2.0.3, =2.0.4 -...

org.appfuse.archetypes:appfuse-basic-jsf (2.0.2), org.appfuse.archetypes:appfuse-basic-spring (2.0.2) +42 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-core (2.0.1)

org.springframework.security:spring-security-core MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.appfuse.archetypes:appfuse-basic-jsf 2.0.2 -...

org.appfuse:appfuse (>=2.0-m2, <=2.0-m3), org.appfuse:appfuse-archetypes (>=1.0-m2, <=1.0-m3) +21 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.0.3)

mysql:mysql-connector-java MAVEN version 5.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - org.appfuse:appfuse =2.0-m2, =1.0-m2, =1.0-m2, =1.0-m2, =1.0-m2, =1.0-m2, =2.0-m2, =2.0-m2, =2.0-m2, =2.0-m...

org.appfuse.archetypes:appfuse-basic-jsf (2.0.2), org.appfuse.archetypes:appfuse-basic-spring (2.0.2) +42 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (2.0.1)

org.springframework.security:spring-security-core MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.appfuse.archetypes:appfuse-basic-jsf 2.0.2 -...

com.github.kaitoy.sneo:giane (>=1.2.0, <=1.2.3), com.googlecode.struts2-conversation:struts2-conversation-scope-plugin (1.3.1) +13 more potentially affected by CVE-2016-6795 via org.apache.struts:struts2-convention-plugin (>=2.3.1, <=2.3.30)

org.apache.struts:struts2-convention-plugin MAVEN version =2.3.1, =1.2.0, =1.1.0, =3.3.0, =3.3.0, =2.3.1, =2.3.1, =2.3.1, =2.3.1, =2.2.1, =2.2, =3.2.0, =1.0, =1.2.2, =1.3.5 Source cves: CVE-2016-6795 Source advisory: GHSA-44HV-JJX7-QFJG...

org.appfuse.archetypes:appfuse-basic-jsf (2.0.2), org.appfuse.archetypes:appfuse-basic-spring (2.0.2) +42 more potentially affected by CVE-2016-9879 via org.springframework.security:spring-security-core (2.0.1)

org.springframework.security:spring-security-core MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.appfuse.archetypes:appfuse-basic-jsf 2.0.2 -...

org.appfuse.archetypes:appfuse-basic-jsf (2.0.2), org.appfuse.archetypes:appfuse-basic-spring (2.0.2) +42 more potentially affected by CVE-2014-3527 via org.springframework.security:spring-security-core (2.0.1)

org.springframework.security:spring-security-core MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.appfuse.archetypes:appfuse-basic-jsf 2.0.2 -...

org.appfuse:appfuse (>=2.0-m2, <=2.0-m3), org.appfuse:appfuse-archetypes (>=1.0-m2, <=1.0-m3) +21 more potentially affected by CVE-2019-2692 via mysql:mysql-connector-java (5.0.3)

mysql:mysql-connector-java MAVEN version 5.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - org.appfuse:appfuse =2.0-m2, =1.0-m2, =1.0-m2, =1.0-m2, =1.0-m2, =1.0-m2, =2.0-m2, =2.0-m2, =2.0-m2, =2.0-m...

org.appfuse.archetypes:appfuse-basic-jsf (2.0.2), org.appfuse.archetypes:appfuse-basic-spring (2.0.2) +42 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (2.0.1)

org.springframework.security:spring-security-core MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.appfuse.archetypes:appfuse-basic-jsf 2.0.2 -...

org.appfuse:appfuse-light-jsf (2.2.1), org.appfuse:appfuse-light-spring (2.2.1) +8 more potentially affected by CVE-2018-20677 via org.webjars:bootstrap (2.2.1)

org.webjars:bootstrap MAVEN version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:bootstrap and may be impacted: - org.appfuse:appfuse-light-jsf 2.2.1 - org.appfuse:appfuse-light-spring 2.2.1 -...

org.appfuse:appfuse-light-jsf (2.2.1), org.appfuse:appfuse-light-spring (2.2.1) +8 more potentially affected by CVE-2018-20676 via org.webjars:bootstrap (2.2.1)

org.webjars:bootstrap MAVEN version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:bootstrap and may be impacted: - org.appfuse:appfuse-light-jsf 2.2.1 - org.appfuse:appfuse-light-spring 2.2.1 -...

org.appfuse.archetypes:appfuse-basic-jsf (2.0.2), org.appfuse.archetypes:appfuse-basic-spring (2.0.2) +42 more potentially affected by CVE-2016-5007 via org.springframework.security:spring-security-core (2.0.1)

org.springframework.security:spring-security-core MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.appfuse.archetypes:appfuse-basic-jsf 2.0.2 -...

CVE-2007-5280

Multiple cross-site scripting XSS vulnerabilities in messages.jsp in AppFuse before 2.0 Final allow remote attackers to inject arbitrary web script or HTML via unspecified input that is recorded in 1 success or 2 error messages...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in messages.jsp in AppFuse before 2.0 Final allow remote attackers to inject arbitrary web script or HTML via unspecified input that is recorded in 1 success or 2 error messages...

CVE-2007-5280: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in messages.jsp in AppFuse before 2.0 Final allow remote attackers to inject arbitrary web script or HTML via unspecified input that is recorded in 1 success or 2 error messages...

CVE-2007-5280

CVE-2007-5280 describes multiple XSS vulnerabilities in AppFuse before 2.0 Final, triggered via input recorded in (1) success or (2) error messages within messages.jsp. The affected component is the messages.jsp handling in AppFuse; root cause is improper sanitization/encoding of user input leadi...