Lucene search
K

6 matches found

vulnersOsv
vulnersOsv
added 2022/05/17 3:56 a.m.2 views

org.apache.portals.jetspeed-2:app-servers (>=2.1.3 <=2.1.4), org.apache.portals.jetspeed-2:jetspeed-archetype (>=2.2.1 <=2.3.0) +1 more potentially affected by CVE-2016-0709 via org.apache.portals.jetspeed-2:jetspeed (>=2.1.3 <=2.3.0)

org.apache.portals.jetspeed-2:jetspeed MAVEN version =2.1.3, =2.1.3, =2.2.1, =2.2.2, =2.3.0 Source cves: CVE-2016-0709 Source advisory: OSV:GHSA-W47P-5Q88-HJ5G...

9CVSS7AI score0.77495EPSS
Exploits5
IBM Security Bulletins
IBM Security Bulletins
added 2020/02/05 12:53 a.m.29 views

Security Bulletin: Multiple Security Vulnerabilities in Jetspeed Affect IBM Sterling B2B Integrator

Summary There are multiple security vulnerabilities in Jetspeed that affect IBM Sterling B2B Integrator Vulnerability Details CVEID: CVE-2016-0711 DESCRIPTION: Apache Jetspeed is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the add a link, page, or...

9CVSS0.7AI score0.77495EPSS
Exploits9Affected Software1
Check Point Advisories
Check Point Advisories
added 2016/04/18 12:0 a.m.8 views

Apache Jetspeed Remote Code Execution (CVE-2016-0709)

A code execution vulnerability exists Apache Jetspeed. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

9CVSS5.2AI score0.77495EPSS
Exploits5
CVE
CVE
added 2016/04/11 2:0 p.m.91 views

CVE-2016-0709

CVE-2016-0709 is a directory traversal vulnerability in the Apache Jetspeed Portal Site Manager Import/Export function. An authenticated administrator could craft a ZIP archive containing dot-dot sequences to place arbitrary files (e.g., a JSP) on disk, enabling remote code execution. Affected ve...

9CVSS7AI score0.77495EPSS
Exploits5References6Affected Software1
Packet Storm
Packet Storm
added 2016/03/31 12:0 a.m.45 views

Apache Jetspeed Arbitrary File Upload

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Apache Jetspeed Arbitrary File Upload', 'Description' = %q This module exploits the unsecured User Manager REST API and a ZIP file path traversal ...

9CVSS7.8AI score0.77495EPSS
Exploits7
Exploit DB
Exploit DB
added 2016/03/31 12:0 a.m.74 views

Apache Jetspeed - Arbitrary File Upload (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Apache Jetspeed Arbitrary File Upload', 'Description' = %q This module exploits the unsecured User Manager REST API and a ZIP file path traversal ...

8.1AI score
Exploits0
Rows per page
Query Builder