com.bstek.uflo:uflo-console (>=2.0.0, <=2.0.1), com.bstek.uflo:uflo-core (>=2.0.0, <=2.0.1) +21 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (3.6.5.final)

org.hibernate:hibernate-core MAVEN version 3.6.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.bstek.uflo:uflo-console =2.0.0, =2.0.0, =2.0.0, =2.0.1 -...

com.eurodyn.qlack.extras:qlack-extras-hibernate (>=1.7.0, <=1.7.4), eu.ralph-schuster:data-hibernate (>=1.3.0, <=1.3.1) +12 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (4.2.18.final)

org.hibernate:hibernate-core MAVEN version 4.2.18.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.eurodyn.qlack.extras:qlack-extras-hibernate =1.7.0, =1.3.0, =1.1.1.final, =7.0.0-m1, =8.0.1 ...

Missing Authentication Due To Incorrect Configuration

Apache Tomee openejb-core has missing authentication. The vulnerability exists due to an incomplete fix of CVE-2020-11969 where when embedded ActiveMQ broker with URI setting useJMX=true is used, it causes JMX port to open on TCP port 1099, which does not include authentication...

Missing Authentication

Apache Tomee openejb-core has missing authentication. When embedded ActiveMQ broker with URI setting useJMX=true is used, it causes JMX port to open on TCP port 1099, which does not include authentication...