10 matches found
com.day.crx:crx-auth-ldap (2.3.6), com.day.crx:crx-server (2.3.6) +16 more potentially affected by CVE-2016-6809 via org.apache.tika:tika-core (0.10)
org.apache.tika:tika-core MAVEN version 0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tika:tika-core and may be impacted: - com.day.crx:crx-auth-ldap 2.3.6 - com.day.crx:crx-server 2.3.6 - com.day.crx:crx-server-j2ee 2.3.6 -...
biz.netcentric.cq.tools.accesscontroltool:sling-minimum-version-environment (>=4.2.0, <=4.2.4), com.adobe.cq.testing:cq-it-framework (2.0.130) +65 more potentially affected by CVE-2016-6809 via org.apache.tika:tika-core (0.8)
org.apache.tika:tika-core MAVEN version 0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tika:tika-core and may be impacted: - biz.netcentric.cq.tools.accesscontroltool:sling-minimum-version-environment =4.2.0, =2.2.0, =0.3.1, =1.0.0,...
com.github.greengerong:webdriver-accessibility-check (1.0), de.eonas.portal.demo:content (0.1) +140 more potentially affected by CVE-2016-6809 via org.apache.tika:tika-core (0.9)
org.apache.tika:tika-core MAVEN version 0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tika:tika-core and may be impacted: - com.github.greengerong:webdriver-accessibility-check 1.0 - de.eonas.portal.demo:content 0.1 -...
com.adobe.cq.commerce:cq-commerce-hybris-impl (>=5.6.100, <=6.4.4), com.adobe.cq.media:cq-media-publishing-dps-integration (5.6.16) +36 more potentially affected by CVE-2016-6809 via org.apache.tika:tika-core (0.6)
org.apache.tika:tika-core MAVEN version 0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tika:tika-core and may be impacted: - com.adobe.cq.commerce:cq-commerce-hybris-impl =5.6.100, =2.0.6, =1.0.10, =1.0.8, =1.0.8, =1.0.12, =2.1.0, =2.1....
CVE-2016-6809
Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization...
CVE-2016-6809
Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization...
ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), ai.mattmann.mnemosyne:cas-crawler (1.11.0) +1352 more potentially affected by CVE-2016-6809 via org.apache.tika:tika-core (>=0.4, <=1.13)
org.apache.tika:tika-core MAVEN version =0.4, =1.3, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.14.0-rc.2 and more Source cves: CVE-2016-6809 Source advisory: MEND:CVE-2016-6809...
CVE-2016-6809
Apache Tika prior to 1.14 is vulnerable to remote Java code execution via serialized objects embedded in MATLAB files. The root cause is native deserialization invoked through JMatIO, enabling an attacker to inject and execute code during object deserialization. Public references in the connected...
