com.bbossgroups.security:bboss-security (>=4.10.8, <=5.0.0), com.bbossgroups.security:bboss-security-web (>=4.10.8, <=5.0.0) +7 more potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (3.7.6)

net.sf.jasperreports:jasperreports MAVEN version 3.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - com.bbossgroups.security:bboss-security =4.10.8, =4.10.8, =4.10.8, =4.10.8, =4.10.8, =4.10....

EUVD-2023-42769

Malicious code in bioql PyPI...

com.bbossgroups.security:bboss-security (>=4.10.8, <=5.0.0), com.bbossgroups.security:bboss-security-web (>=4.10.8, <=5.0.0) +7 more potentially affected by CVE-2025-10492 via net.sf.jasperreports:jasperreports (3.7.6)

net.sf.jasperreports:jasperreports MAVEN version 3.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - com.bbossgroups.security:bboss-security =4.10.8, =4.10.8, =4.10.8, =4.10.8, =4.10.8, =4.10....

CVE-2023-39016

bboss-persistent v6.0.9 and below was discovered to contain a code injection vulnerability in the component com.frameworkset.common.poolman.util.SQLManager.createPool. This vulnerability is exploited via passing an unchecked argument...

CVE-2023-39016

bboss-persistent v6.0.9 and below was discovered to contain a code injection vulnerability in the component com.frameworkset.common.poolman.util.SQLManager.createPool. This vulnerability is exploited via passing an unchecked argument...

Code injection

bboss-persistent v6.0.9 and below was discovered to contain a code injection vulnerability in the component com.frameworkset.common.poolman.util.SQLManager.createPool. This vulnerability is exploited via passing an unchecked argument...

CVE-2023-39016

CVE-2023-39016 affects bboss-persistent v6.0.9 and earlier. The issue is a code injection vulnerability in com.frameworkset.common.poolman.util.SQLManager.createPool, exploitable via passing an unchecked argument. Public metrics indicate a critical impact (CVSS v3.1: 9.8, network access, no privi...

CVE-2023-39016

bboss-persistent v6.0.9 and below was discovered to contain a code injection vulnerability in the component com.frameworkset.common.poolman.util.SQLManager.createPool. This vulnerability is exploited via passing an unchecked argument...

CVE-2023-39016

bboss-persistent v6.0.9 and below was discovered to contain a code injection vulnerability in the component com.frameworkset.common.poolman.util.SQLManager.createPool. This vulnerability is exploited via passing an unchecked argument...

CVE-2023-39016

bboss-persistent v6.0.9 and below was discovered to contain a code injection vulnerability in the component com.frameworkset.common.poolman.util.SQLManager.createPool. This vulnerability is exploited via passing an unchecked argument...

bboss code injection vulnerability

bboss is a J2EE framework in the bboss open source. A security vulnerability exists in bboss bboss-persistent v6.0.9 and earlier versions, which stems from a code injection vulnerability in the component com.frameworkset.common.poolman.util.SQLManager.createPool...

CVE-2023-39016: Improper Control of Generation of Code

bboss-persistent v6.0.9 and below was discovered to contain a code injection vulnerability in the component com.frameworkset.common.poolman.util.SQLManager.createPool. This vulnerability is exploited via passing an unchecked argument...

PT-2023-26738 · Unknown · Bboss-Persistent

Name of the Vulnerable Software and Affected Versions: bboss-persistent versions 6.0.9 and below Description: The issue is related to a code injection vulnerability in the component com.frameworkset.common.poolman.util.SQLManager.createPool. This vulnerability is exploited via passing an unchecke...

com.bbossgroups.security:bboss-security (>=4.10.8, <=5.0.0), com.bbossgroups.security:bboss-security-web (>=4.10.8, <=5.0.0) +46 more potentially affected by CVE-2019-12415 via org.apache.poi:poi (3.0.2-final)

org.apache.poi:poi MAVEN version 3.0.2-final is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.poi:poi and may be impacted: - com.bbossgroups.security:bboss-security =4.10.8, =4.10.8, =4.10.8, =4.10.8, =4.10.8, =4.10.8, =4.10.8, =1.3.2, =2.2.0...

ch.epfl.bbp.nlp:bluima_module (1.0.1), ch.epfl.bbp.nlp:bluima_parent (1.0.0) +334 more potentially affected by CVE-2021-23926 via org.apache.xmlbeans:xmlbeans (2.4.0)

org.apache.xmlbeans:xmlbeans MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.xmlbeans:xmlbeans and may be impacted: - ch.epfl.bbp.nlp:bluimamodule 1.0.1 - ch.epfl.bbp.nlp:bluimaparent 1.0.0 -...

com.bbossgroups.pdp:bboss-pdp-adminservice (>=5.0.1.5, <=5.0.3.0), com.bbossgroups.pdp:bboss-pdp-auth (>=5.0.1.5, <=5.0.3.0) +99 more potentially affected by CVE-2019-13990 via org.quartz-scheduler:quartz (1.8.6)

org.quartz-scheduler:quartz MAVEN version 1.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.quartz-scheduler:quartz and may be impacted: - com.bbossgroups.pdp:bboss-pdp-adminservice =5.0.1.5, =5.0.1.5, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2,...