com.proofpoint.discovery:discovery-server (>=1.1, <=1.2), com.proofpoint.platform:cassandra-experimental (>=0.44, <=0.67) +1 more potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (0.8.5)

org.apache.cassandra:cassandra-all MAVEN version 0.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.proofpoint.discovery:discovery-server =1.1, =0.44, =0.65, =0.66 Source cves:...

CVE-2020-24231

Symmetric DS 3.12.0 uses mx4j to provide access to JMX over HTTP. mx4j, by default, has no auth and is available on all interfaces. An attacker can interact with JMX: get system info, and invoke MBean methods. It is possible to install additional MBeans from a remote host using MLet that leads to...