cc.catalysts.boot:cat-boot-javamelody (>=0.0.4, <=0.2.28), net.bull.javamelody:javamelody-collector-server (>=1.9.3, <=1.59.0) +2 more potentially affected by CVE-2016-20102 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.59.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =0.0.4, =1.9.3, =1.8.1, =1.59.0 Source cves: CVE-2016-20102 Source advisory: SNYK:JAVA-NETBULLJAVAMELODY-21691500...

Cross-site Scripting (XSS)

Overview net.bull.javamelody:javamelody-core is a JavaEE application monitoring module. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the graph parameter in the /monitoring endpoint. An attacker can execute arbitrary JavaScript in a victim's browser by supplying...

cc.catalysts.boot:cat-boot-javamelody (>=0.0.4, <=0.2.28), net.bull.javamelody:javamelody-collector-server (>=1.9.3, <=1.59.0) +2 more potentially affected by CVE-2016-20102 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.59.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =0.0.4, =1.9.3, =1.8.1, =1.59.0 Source cves: CVE-2016-20102 Source advisory: MEND:CVE-2016-20102...

cc.catalysts.boot:cat-boot-javamelody (>=0.0.4, <=0.2.28), net.bull.javamelody:javamelody-collector-server (>=1.9.3, <=1.60.0) +2 more potentially affected by CVE-2016-1000273 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.60.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =0.0.4, =1.9.3, =1.8.1, =1.60.0 Source cves: CVE-2016-1000273 Source advisory: MEND:CVE-2016-1000273...

cc.catalysts.boot:cat-boot-javamelody (>=0.0.4, <=0.2.28), net.bull.javamelody:javamelody-collector-server (>=1.9.3, <=1.60.0) +2 more potentially affected by CVE-2016-1000273 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.60.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =0.0.4, =1.9.3, =1.8.1, =1.60.0 Source cves: CVE-2016-1000273 Source advisory: GHSA-CQHR-JQVC-QW9P...

cc.catalysts.boot:cat-boot-javamelody (>=0.0.4, <=0.2.28), net.bull.javamelody:javamelody-collector-server (>=1.9.3, <=1.60.0) +2 more potentially affected by CVE-2016-1000273 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.60.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =0.0.4, =1.9.3, =1.8.1, =1.60.0 Source cves: CVE-2016-1000273 Source advisory: OSV:GHSA-CQHR-JQVC-QW9P...

net.bull.javamelody:javamelody-collector-server (1.9.3), net.bull.javamelody:javamelody-spring-boot-starter (1.9.3) +1 more potentially affected by CVE-2013-4378 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.46.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =1.8.1, =1.46.0 Source cves: CVE-2013-4378 Source advisory: OSV:GHSA-P4MX-P49M-8RW4...

net.bull.javamelody:javamelody-collector-server (1.9.3), net.bull.javamelody:javamelody-spring-boot-starter (1.9.3) +1 more potentially affected by CVE-2013-4378 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.46.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =1.8.1, =1.46.0 Source cves: CVE-2013-4378 Source advisory: GHSA-P4MX-P49M-8RW4...

cc.catalysts.boot:cat-boot-javamelody (>=0.0.4, <=0.2.28), net.bull.javamelody:javamelody-collector-server (>=1.9.3, <=1.60.0) +2 more potentially affected by CVE-2018-12432 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.60.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =0.0.4, =1.9.3, =1.8.1, =1.60.0 Source cves: CVE-2018-12432 Source advisory: OSV:GHSA-G66Q-GRXC-64J3...

cc.catalysts.boot:cat-boot-javamelody (>=0.0.4, <=0.2.28), net.bull.javamelody:javamelody-collector-server (>=1.9.3, <=1.60.0) +2 more potentially affected by CVE-2018-12432 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.60.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =0.0.4, =1.9.3, =1.8.1, =1.60.0 Source cves: CVE-2018-12432 Source advisory: GHSA-G66Q-GRXC-64J3...

br.com.thiaguten:umbrella-monitoring (>=0.1.0, <=0.1.1), cc.catalysts.boot:cat-boot-javamelody (>=0.0.4, <=0.2.28) +7 more potentially affected by CVE-2018-15531 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.73.1)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =0.1.0, =0.0.4, =1.9.3, =1.9.3, =1.5.7.0, =1.8.1, =2.0.0.rc1, =2.0.0.rc1, =2.0.1 - uk.ac.ebi.interpro.scan:server 5.36-75.0 Source cves: CVE-2018-15531 Source advisory: GHSA-6FVX-R7HX-3VH6...

br.com.thiaguten:umbrella-monitoring (>=0.1.0, <=0.1.1), cc.catalysts.boot:cat-boot-javamelody (>=0.0.4, <=0.2.28) +7 more potentially affected by CVE-2018-15531 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.73.1)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =0.1.0, =0.0.4, =1.9.3, =1.9.3, =1.5.7.0, =1.8.1, =2.0.0.rc1, =2.0.0.rc1, =2.0.1 - uk.ac.ebi.interpro.scan:server 5.36-75.0 Source cves: CVE-2018-15531 Source advisory: OSV:GHSA-6FVX-R7HX-3VH6...

XML External Entity (XXE)

javamelody-core is vulnerable to XML external entity attacks. This is due to enabled support for external entities and DTD in parseSoapMethodName function in bull/javamelody/PayloadNameRequestWrapper.java which allows for a remote attacker to perform such attacks...

br.com.thiaguten:umbrella-monitoring (>=0.1.0, <=0.1.1), cc.catalysts.boot:cat-boot-javamelody (>=0.0.4, <=0.2.28) +7 more potentially affected by CVE-2018-15531 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.73.1)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =0.1.0, =0.0.4, =1.9.3, =1.9.3, =1.5.7.0, =1.8.1, =2.0.0.rc1, =2.0.0.rc1, =2.0.1 - uk.ac.ebi.interpro.scan:server 5.36-75.0 Source cves: CVE-2018-15531 Source advisory: MEND:CVE-2018-15531...

Cross-site Scripting (XSS)

javamelody-core is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of sanitization in the counter parameter when performing the clearcounter action through the /monitoring URI, causing XSS attacks...

cc.catalysts.boot:cat-boot-javamelody (>=0.0.4, <=0.2.28), net.bull.javamelody:javamelody-collector-server (>=1.9.3, <=1.60.0) +2 more potentially affected by CVE-2018-12432 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.60.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =0.0.4, =1.9.3, =1.8.1, =1.60.0 Source cves: CVE-2018-12432 Source advisory: MEND:CVE-2018-12432...

net.bull.javamelody:javamelody-collector-server (1.9.3), net.bull.javamelody:javamelody-spring-boot-starter (1.9.3) +1 more potentially affected by CVE-2013-4378 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.46.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =1.8.1, =1.46.0 Source cves: CVE-2013-4378 Source advisory: MEND:CVE-2013-4378...