org.apache.jackrabbit:jackrabbit-jca (1.5.6), org.apache.jackrabbit:jackrabbit-webapp (1.5.6) potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (1.5.6)

org.apache.jackrabbit:jackrabbit-core MAVEN version 1.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jackrabbit:jackrabbit-core and may be impacted: - org.apache.jackrabbit:jackrabbit-jca 1.5.6 - org.apache.jackrabbit:jackrabbit-webapp...

org.apache.jackrabbit:jackrabbit-core (>=2.0-beta1, <=2.0-beta3), org.apache.jackrabbit:jackrabbit-jca (>=2.0-beta1, <=2.0-beta3) +9 more potentially affected by CVE-2016-6809 via org.apache.tika:tika-core (0.4)

org.apache.tika:tika-core MAVEN version 0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tika:tika-core and may be impacted: - org.apache.jackrabbit:jackrabbit-core =2.0-beta1, =2.0-beta1, =2.0-beta1, =2.0-beta1, =2.0-beta1, =1.4.0,...

org.apache.jackrabbit:jackrabbit-bundle (>=2.12.0, <=2.12.3), org.apache.jackrabbit:jackrabbit-jcr-server (>=2.12.0, <=2.12.3) +5 more potentially affected by CVE-2016-6801 via org.apache.jackrabbit:jackrabbit-webdav (>=2.12.0, <=2.12.3)

org.apache.jackrabbit:jackrabbit-webdav MAVEN version =2.12.0, =2.12.0, =2.12.0, =2.12.0, =2.12.0, =2.12.0, =1.3.2, =1.3.4 - org.apache.sling:org.apache.sling.jcr.webdav 2.3.4 Source cves: CVE-2016-6801 Source advisory: MEND:CVE-2016-6801...

de.pfabulist.lindwurm:niodav (>=0.2.4, <=0.4.2), de.pfabulist.lindwurm:stellvertreter-app (0.5.2) +5 more potentially affected by CVE-2016-6801 via org.apache.jackrabbit:jackrabbit-webdav (>=2.10.0, <=2.10.3)

org.apache.jackrabbit:jackrabbit-webdav MAVEN version =2.10.0, =0.2.4, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.10.3 Source cves: CVE-2016-6801 Source advisory: MEND:CVE-2016-6801...

com.khubla.com.pragmatach.examples:jcrexample (1.40), com.khubla.pragmatach:pragmatach-jcr (1.40) +15 more potentially affected by CVE-2016-6801 via org.apache.jackrabbit:jackrabbit-webdav (>=2.8.0, <=2.8.2)

org.apache.jackrabbit:jackrabbit-webdav MAVEN version =2.8.0, =2.1.0, =2.1.0, =2.8.0, =2.8.0, =2.8.0, =2.8.0, =2.8.0, =1.0.9, =1.0, =0.9.5, =5.13.1, =5.13.1, =5.22.7 and more Source cves: CVE-2016-6801 Source advisory: MEND:CVE-2016-6801...

org.apache.jackrabbit:jackrabbit-bundle (2.10.0), org.apache.jackrabbit:jackrabbit-jca (2.10.0) +2 more potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (2.10.0)

org.apache.jackrabbit:jackrabbit-core MAVEN version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jackrabbit:jackrabbit-core and may be impacted: - org.apache.jackrabbit:jackrabbit-bundle 2.10.0 - org.apache.jackrabbit:jackrabbit-jc...

com.day.crx:crx-auth-ldap (2.3.15), com.day.crx:crx-spellchecker (>=2.3.14, <=2.3.64) +14 more potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (>=2.4.0, <=2.4.5)

org.apache.jackrabbit:jackrabbit-core MAVEN version =2.4.0, =2.3.14, =2.3.14, =0.6.0, =2.4.0, =2.4.0, =2.4.0, =5.12.0, =5.11.0, =5.11.0, =5.11.0, =5.12.2 and more Source cves: CVE-2015-1833 Source advisory: MEND:CVE-2015-1833...