PT-2021-18667

Name of the Vulnerable Software and Affected Versions Knowage Suite version 7.3 Description The issue concerns unauthenticated reflected cross-site scripting XSS. An attacker can inject arbitrary web script in "/servlet/AdapterHTTP" via the targetService parameter. Recommendations For Knowage Sui...

CVE-2021-30213: Improper Neutralization of Input During Web Page Generation

Knowage Suite 7.3 is vulnerable to unauthenticated reflected cross-site scripting XSS. An attacker can inject arbitrary web script in '/servlet/AdapterHTTP' via the 'targetService' parameter...

Exploit for CVE-2020-14882

CVE-2020-14882 is a vulnerability in Oracle WebLogic Server. The vulnerability allows for unauthorized access and remote code execution. The vulnerability is caused by a flaw in the way the server handles certain types of requests, which can be exploited by an attacker to gain access to sensitive...

Moderate: Red Hat Security Advisory: rh-eclipse-jetty security update

An update for rh-eclipse-jetty is now available for Red Hat Developer Tools. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

RHEL 7 : rh-eclipse-jetty (RHSA-2021:1509)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1509 advisory. Jetty is a 100% Java HTTP Server and Servlet Container. The following packages have been upgraded to a later upstream version:...

Huawei EulerOS: Security Advisory for velocity (EulerOS-SA-2021-1858)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for jetty (FEDORA-2021-fd66b2bd53)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for jetty (FEDORA-2021-444e38face)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

io.undertow:undertow-http2-test-suite (1.3.1.final), io.undertow:undertow-servlet (1.3.1.final) +1 more potentially affected by CVE-2020-10719 via io.undertow:undertow-core (1.3.1.final)

io.undertow:undertow-core MAVEN version 1.3.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.1.final - io.undertow:undertow-servlet 1.3.1.final -...

co.paralleluniverse:comsat-actors-undertow (0.6.0), co.paralleluniverse:comsat-test-utils (0.6.0) +161 more potentially affected by CVE-2020-10719 via io.undertow:undertow-core (1.3.15.final)

io.undertow:undertow-core MAVEN version 1.3.15.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - co.paralleluniverse:comsat-actors-undertow 0.6.0 - co.paralleluniverse:comsat-test-utils 0.6.0 -...

io.undertow:undertow-servlet (1.1.0.cr7), io.undertow:undertow-websockets-jsr (1.1.0.cr7) potentially affected by CVE-2020-10719 via io.undertow:undertow-core (1.1.0.cr7)

io.undertow:undertow-core MAVEN version 1.1.0.cr7 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.cr7 - io.undertow:undertow-websockets-jsr 1.1.0.cr7 Source cves:...

io.undertow:undertow-servlet (1.1.0.cr3), io.undertow:undertow-websockets-jsr (1.1.0.cr3) potentially affected by CVE-2020-10719 via io.undertow:undertow-core (1.1.0.cr3)

io.undertow:undertow-core MAVEN version 1.1.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.cr3 - io.undertow:undertow-websockets-jsr 1.1.0.cr3 Source cves:...

io.undertow:undertow-http2-test-suite (1.2.1.final), io.undertow:undertow-servlet (1.2.1.final) +1 more potentially affected by CVE-2020-10719 via io.undertow:undertow-core (1.2.1.final)

io.undertow:undertow-core MAVEN version 1.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.1.final - io.undertow:undertow-servlet 1.2.1.final -...

io.undertow:undertow-servlet (1.4.5.final), io.undertow:undertow-websockets-jsr (1.4.5.final) potentially affected by CVE-2020-10719 via io.undertow:undertow-core (1.4.5.final)

io.undertow:undertow-core MAVEN version 1.4.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.5.final - io.undertow:undertow-websockets-jsr 1.4.5.final Source cves:...

io.undertow:undertow-http2-test-suite (1.3.0.beta13), io.undertow:undertow-servlet (1.3.0.beta13) +20 more potentially affected by CVE-2020-10719 via io.undertow:undertow-core (1.3.0.beta13)

io.undertow:undertow-core MAVEN version 1.3.0.beta13 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta13 - io.undertow:undertow-servlet 1.3.0.beta13 -...

io.undertow:undertow-http2-test-suite (1.2.0.beta2), io.undertow:undertow-servlet (1.2.0.beta2) +2 more potentially affected by CVE-2020-10719 via io.undertow:undertow-core (1.2.0.beta2)

io.undertow:undertow-core MAVEN version 1.2.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.0.beta2 - io.undertow:undertow-servlet 1.2.0.beta2 -...

io.undertow:undertow-servlet (1.0.18.final), io.undertow:undertow-websockets-jsr (1.0.18.final) potentially affected by CVE-2020-10719 via io.undertow:undertow-core (1.0.18.final)

io.undertow:undertow-core MAVEN version 1.0.18.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.18.final - io.undertow:undertow-websockets-jsr 1.0.18.final Source...

io.undertow:undertow-servlet (1.3.31.final), io.undertow:undertow-websockets-jsr (1.3.31.final) potentially affected by CVE-2020-10719 via io.undertow:undertow-core (1.3.31.final)

io.undertow:undertow-core MAVEN version 1.3.31.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.31.final - io.undertow:undertow-websockets-jsr 1.3.31.final Source...

io.undertow:undertow-servlet (1.0.0.alpha14), io.undertow:undertow-websockets-jsr (1.0.0.alpha14) potentially affected by CVE-2020-10719 via io.undertow:undertow-core (1.0.0.alpha14)

io.undertow:undertow-core MAVEN version 1.0.0.alpha14 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha14 - io.undertow:undertow-websockets-jsr 1.0.0.alpha14 Source...

io.undertow:undertow-servlet (1.0.0.alpha4), io.undertow:undertow-websockets-jsr (1.0.0.alpha4) potentially affected by CVE-2020-10719 via io.undertow:undertow-core (1.0.0.alpha4)

io.undertow:undertow-core MAVEN version 1.0.0.alpha4 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha4 - io.undertow:undertow-websockets-jsr 1.0.0.alpha4 Source...