am.ik.home:uaa-server (>=1.0.0, <=1.2.0), org.springframework.boot:spring-boot-starter-data-rest (1.4.3.release) +2 more potentially affected by CVE-2026-41729 via org.springframework.data:spring-data-rest-core (2.5.6.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.5.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - am.ik.home:uaa-server =1.0.0, =1.2.0 -...

am.ik.home:uaa-server (>=1.0.0, <=1.2.0), org.springframework.boot:spring-boot-starter-data-rest (1.4.3.release) +2 more potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-core (2.5.6.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.5.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - am.ik.home:uaa-server =1.0.0, =1.2.0 -...

am.ik.blog:blog-domain (>=4.0.2, <=4.2.0), am.ik.blog:blog-mapper (>=4.0.0, <=4.4.0) +1806 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (4.3.7.release)

org.springframework:spring-core MAVEN version 4.3.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - am.ik.blog:blog-domain =4.0.2, =4.0.0, =2.0.0, =1.0.3, =1.0.0, =2.4, =2.4, =2.4, =2.4,...

am.ik.home:uaa-client (>=1.3.0, <=1.8.1), am.ik.home:uaa-integration-test (>=1.3.0, <=1.8.1) +313 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.3.6.release)

org.springframework:spring-webmvc MAVEN version 4.3.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - am.ik.home:uaa-client =1.3.0, =1.3.0, =1.3.0, =0.0.1, =0.2.0, =1.0.8, =0.1.1, =0.1.1,...

CVE-2021-22098

UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious user can exploit the open redirect vulnerability by social engineering leading to take over of victims’ accounts in certain cases along with redirection of UAA users to a malicious sites...

EUVD-2021-9259

Malicious code in bioql PyPI...

am.ik.home:uaa-client (1.9.0), am.ik.home:uaa-integration-test (1.9.0) +904 more potentially affected by CVE-2024-22262 via org.springframework:spring-web (4.3.7.release)

org.springframework:spring-web MAVEN version 4.3.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - am.ik.home:uaa-client 1.9.0 - am.ik.home:uaa-integration-test 1.9.0 - am.ik.home:uaa-server...

am.ik.home:uaa-client (>=1.3.0, <=1.9.0), am.ik.home:uaa-integration-test (>=1.3.0, <=1.9.0) +181 more potentially affected by CVE-2023-34036 via org.springframework.hateoas:spring-hateoas (0.23.0.release)

org.springframework.hateoas:spring-hateoas MAVEN version 0.23.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - am.ik.home:uaa-client =1.3.0, =1.3.0, =1.3.0, =1.0.1.release,...

am.ik.home:uaa-server (>=1.0.0, <=1.2.0), cn.chendahai:rocketmq-console-alarm (1.0.3) +335 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.4.3.release)

org.springframework.boot:spring-boot MAVEN version 1.4.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - am.ik.home:uaa-server =1.0.0, =1.0, =1.0.1, =3.0.1.3, =3.0.1.9, =3.0.1.9, =3.0....

ai.hyacinth.framework:core-service-jpa-support (>=0.5.0, <=0.5.21), ai.hyacinth.framework:core-service-trigger-server (>=0.5.0, <=0.5.21) +3957 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (>=5.0.0.beta1, <=5.3.19.final)

org.hibernate:hibernate-core MAVEN version =5.0.0.beta1, =0.5.0, =0.5.0, =1.0.0, =1.0.0, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.2, =0.6 and more Source cves: CVE-2020-25638 Source advisory: OSV:GHSA-J8JW-G6FQ-MP7H...

CVE-2021-22098

UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious user can exploit the open redirect vulnerability by social engineering leading to take over of victims’ accounts in certain cases along with redirection of UAA users to a malicious sites...

CVE-2021-22098

UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious user can exploit the open redirect vulnerability by social engineering leading to take over of victims’ accounts in certain cases along with redirection of UAA users to a malicious sites...

CVE-2021-22098

UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious user can exploit the open redirect vulnerability by social engineering leading to take over of victims’ accounts in certain cases along with redirection of UAA users to a malicious sites...

Open redirect

UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious user can exploit the open redirect vulnerability by social engineering leading to take over of victims’ accounts in certain cases along with redirection of UAA users to a malicious sites...

CVE-2021-22098

UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious user can exploit the open redirect vulnerability by social engineering leading to take over of victims’ accounts in certain cases along with redirection of UAA users to a malicious sites...

CVE-2021-22098

UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious user can exploit the open redirect vulnerability by social engineering leading to take over of victims’ accounts in certain cases along with redirection of UAA users to a malicious sites...

CVE-2021-22098

CVE-2021-22098 affects Cloud Foundry UAA server. Versions prior to 75.4.0 are vulnerable to an open redirect vulnerability exploitable via social engineering, potentially leading to loss of user accounts and redirection to malicious sites. Practical impact is limited to cases described in vendor ...

PT-2021-14851

Name of the Vulnerable Software and Affected Versions UAA server versions prior to 75.4.0 Description The issue allows a malicious user to exploit an open redirect vulnerability through social engineering, potentially leading to the takeover of victims' accounts and redirection of UAA users to...

CVE-2021-22098: URL Redirection to Untrusted Site

UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious user can exploit the open redirect vulnerability by social engineering leading to take over of victims’ accounts in certain cases along with redirection of UAA users to a malicious sites...

CVE-2021-22098: Open redirect vulnerability in UAA server | Cloud Foundry

Severity Medium Vendor Cloud Foundry Foundation Description UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious user can exploit the open redirect vulnerability by social engineering leading to take over of victims’ accounts in certain cases along wit...